Does DEP work in OptOut mode?

Discussion in 'Windows Vista Security' started by Jon Abbott, Jun 28, 2006.

  1. Jon Abbott

    Jon Abbott Guest

    Apps that should be killed by DEP don't get killed when it's in OptOut mode.

    Reproduce with the following method:

    1. Set DEP to OptOut
    i) Open a command prompt as Administrator, and type the following
    command:
    bcdedit.exe /set {current} nx OptOut
    2. Reboot
    3. Load up MSN Messenger 7 (v7.5.0324 to be precise)
    4. Load a Java or Shockwave app in IE.

    MSN/IE work. Now force DEP on:

    1. Set DEP to AlwaysOn
    i) Open a command prompt as Administrator, and type the following
    command:
    bcdedit.exe /set {current} nx AlwaysOn
    2. Reboot
    3. Load up MSN Messenger - it's DEP'd
    4. Load a Java or Shockwave app in IE - it's DEP'd

    In OptOut mode IE and MSN Messenger should get killed by DEP. I can't believe
    they actually OptOut!

    Jon
     
    Jon Abbott, Jun 28, 2006
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.