Problem with DEP!

I have a problem here, after restoring my image I went to turn on DEP for all programs, but it is not possible:



Does anyone know what is there?

Thank you in advance.

 

The information at the bottom of the window is your answer.

 

Assuming you don't use EMET, you'll need to change the setting using bcdedit.

The DEP setting is configured in the Boot Configuration Data. You can view this info with bcdedit (http://www.windows7home.net/how-to-use-bcdedit-in-windows-7/).

The DEP setting is the "nx" value under Window Boot Loader. Yours is currently set to either AlwaysOn or AlwaysOff. Both these settings will disable the dialogue shown in the attached image.

Note: You may have local language equivalents of AlwaysOn, AlwaysOff, OptOut, OptIn in the following commands.

To set the options in the dialog you will need to enter ONE of these commands from an elevated command prompt:

bcdedit /set nx OptIn​

bcdedit /set nx OptOut​

To turn DEP on for all programs:

bcdedit /set nx AlwaysOn​

Then reboot for it to take effect.

 

Thanks, is very good to know my DEP is enabled will not be appearing there.

Has only a few more questions:

1. why I can't change my DEP over there? Whenever I changed, because this "problem"?
2. I did (bcdedit/set nx AlwaysOn) and despite my Windows to be in PT/BR appeared the message that it was all accomplished successfully. You can still encounter a problem?
3. I'll have to restore the image later Yes I'll need to follow these steps to activate my DEP or it has already been enabled for all programs by default (though it doesn't appear there)?

Thank you once again for the great help!

 

Sorry, I'm not quite following your English! (I know it is not your native language). To simplify:

Turn DEP on for everything (with no exceptions):
bcdedit /set nx AlwaysOn
then reboot

Turn DEP off completely:
bcdedit /set nx AlwaysOff
then reboot

Turn DEP on for essential windows programs and services only (Avitar a DEP so para programmas...):
bcdedit /set nx OptIn
then reboot

Turn DEP on for all programs and services except those I select (Avitar a DEP para todos os programmas...exceto os que eu selecionar):
bcdedit /set nx OptOut
then reboot
then use the dialog you attached in the first post to add your exceptions using "Adicionar..."

 

Sorry for my English, this is not my native language.

Thank you for everything, the only question that I left was this:

Why can't I change DEP settings for that path (Control Panel\System and Security/System ...)?

Before I could change the settings for that path.

Thanks again!

 

Have you used something that set DEP = AlwaysOn at some point in the past? Or have you used something to turn DEP off completely? Have you used EMET maybe?

When you set DEP = AlwaysOn or AlwaysOff, the Control Panel\System and Security/System ... gets completely disabled by design.

If you want to use Control Panel\System and Security/System ...
bcdedit /set nx OptIn
then reboot

Control Panel\System and Security/System... can then be used.

 

Never used anything to enable or disable DEP, just installed the IE9. Does it have any connection?

More thank you very much for your information, such as leave DEP AlwaysOn, whether it is enabled by Windows or bcdedit.exe.

Thank you again!

 

what is dep?
what's the gain to have the dep on for all my programs
thanks

sorry for my ignorance

 

http://windows.microsoft.com/en-US/...ecution-Prevention-frequently-asked-questions

 

http://vlaurie.com/computers2/Articles/dep.htm

 

I've seen one of your security setups, at What is your current setup these days?, making reference to Microsoft EMET's tool. EMET does allow to enable/disable DEP.

 

Yes, I thought EMET had been used too. I mentioned it (subtly) a few posts back...

@ExtremeGamerBR
https://www.wilderssecurity.com/showpost.php?p=1841191&postcount=14577
https://www.wilderssecurity.com/showpost.php?p=1841194&postcount=14578

These show you have/had Enhanced Mitigation Experience Toolkit (EMET) installed and set to "maximum settings". Maximum settings means DEP = AlwaysOn. DEP = AlwaysOn is the admin setting that disables the Control Panel\System and Security/System ... dialog.

 

Thanks to both!

So it was like I said, I restored the snapshot before I installed the EMET (Left only the W7 + Drivers) i.e. before installing any program. But now I will stop using the EMET, want only DEP + SEHOP.

 

Some advice. If you're going to set DEP and SEHOP on W7, you might as well use EMET. It can easily set DEP and SEHOP and it allows you set ASLR and other buffer overflow protections as well, for little extra cost.

DEP + ASLR > DEP: http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx

A good article for setting up EMET: http://www.mechbgon.com/build/security2.html#sehop