Windows DEP

I am not sure if this has been talked about here yet but if so, please point me to the thread.

with XP 2 windows services and files are protected by default.
Should we be enabling the protection for all our programs? I am enabling it now to see if there are any software conflicts.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2mempr.mspx

Bruce

 

Windows DEP only fully works with AMD64 and Intels new EM64T. There is a good reason why MS chose not to enable it with all programs and so its better you leave it that way.

Regards,
Firecat

 

Yes they did it that way so there wouldn't be so many software issues with all the people now days after ring0, I am guessing.
& also poorley programed software.

Don't you aggree?

Bruce

 

I like this part and really don't see anything wrong with MS trying to make things safer. Kind of a process guard in a way.

"DEP can help prevent some exploits in which a virus or other attack tool has injected executable code into a process and then attempted to execute the injected code. On a system with DEP, execution of the injected code should result in an exception. Software-enforced DEP can help mitigate against exploits of exception handling mechanisms within Windows.

A secondary benefit of DEP relates to good engineering and best practices for application and driver developers. Data execution prevention forces developers to avoid executing code out of data pages without explicitly marking the pages as executable."

Bruce

 

http://support.microsoft.com/kb/875352

 

Hey I dont see anything wrong either - just saying that MS knows whats good, if not whats best, and its better that we leave it as defaults.

 

Best to leave DEP settings as default.

 

Thread moved to a more appropriate Forum.