To DEP or not to DEP …

re: To DEP or not to DEP …

JAson — Sun, 23 Sep 2012 03:31:30 GMT

thanks dude, excellent post! i really appreciate it when peeps take the time to explain the tech

re: To DEP or not to DEP …

Bart Van Weyenberghe — Wed, 18 Jul 2012 09:04:07 GMT

Hi Tim,

Am I missing the link here ? DEP exclusion seems to work only when using the GUI to configure an exception.

When using only the reg add, DEP doesn't seem to know of the configured exception.

Used the reg add on Server 2008 R2 (deployed via SCCM 2007/MDT2010).

thanks,

Bart

re: To DEP or not to DEP …

Ryan — Thu, 05 Jul 2012 18:41:43 GMT

Old thread but figured I'd ask. Is there anyway to disable DEP for an Outlook Add-In. I have a legacy app that utilizes a third party DLL that seemingly performs a task DEP disagrees with.

If I turn off DEP globally in Outlook 2010 via the Outlook options panel it works fine but I'd like to ensure it's specific to my Add-in for security reasons.

In the System Properties Opt-Out list I've tried selecting the DLL of the add-in, the offending DLL I utilize that causes the DEP exception, the MCVBVM60.DLL virtual machine that runs it, and even Outlook.EXE, but none of them seem to do the trick.

I was just wondering if you'd have any ideas.

re: To DEP or not to DEP …

robokev — Thu, 29 Mar 2012 13:38:02 GMT

Thanks for an extremely helpful explanation.

re: To DEP or not to DEP …

tsunku — Sat, 07 Jan 2012 08:41:31 GMT

thank you! that regkey fixed the last annoyance left by dep, i'd run mplayerc.exe and when i exited, i'd get the error msg about not being able to read some memory, i knew it was left over from when i had added it as an exception to dep before i had turned off dep. it was so easy, all i had to do was go to that key and to layers and bam there it was mplayerc.exe, removed that entry and now it works like it's supposed to again. thank you again! no one else on the net had any info that actually helped..

re: To DEP or not to DEP …

Tiago — Tue, 27 Jul 2010 21:08:29 GMT

Fantastic! Excellent! I was struggling with API documentation to find out how to do this and now you solved all my problems! Thank you so very much!

re: To DEP or not to DEP …

nc — Wed, 17 Mar 2010 02:10:56 GMT

@UpAndComing

Just a thought... Do you reboot the system after changing the registry settings (and before manually tweaking the UI)?

re: To DEP or not to DEP …

UpAndComing — Sun, 14 Mar 2010 23:25:55 GMT

I am in the exact same boat as Ramona, all be it 2 years later:

I just set our PCs (XP Pro SP3) to OptOut, and there's one app that doesn't work with DEP (ISIS Pro scanning software). So i added it as an exclusion via a regedit:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]

"C:\\DocuWare\\ISIS PRO.exe"="DisableNXShowUI"

and pushed the registry change via GPO. This ADDED the exe name to the exceptions list (Sys Properties, Performance Options, DEP tab) with a little check in the box and everything. Only problem is, the software does NOT behave as though it is excluded from DEP: I have even used Process Explorer (MS Sysinternals) to verify that despite being added to the exceptions list, ISIS Pro is running with DEP enabled.

You know how we fix it? Log into each machine as an admin, UNCHECK the box (apply), and RECHECK the box (apply again). But like Ramona said, this isn't really an option for hundreds of PCs...

any clue as to why the registry setting that worked for so many others is giving me the bird? I'm baffled that the system seems to think this exception has been made, yet behavior does not reflect registry/system settings.

Thanks for the responses.

~Baffled Sys Admin

re: To DEP or not to DEP …

Tim Newton - MSFT — Wed, 04 Nov 2009 16:06:58 GMT

Hi Rsw8n,

DEP should have no noticeable performance penalty. With hardware NX or XD support, all the OS really has to do is keep an eye on which apps it should monitor or not. I have never seen any sort of formal testing done on DEP performance, but it has been enabled by default ever since SP2 for XP and I have never seen nor heard of any performance penalty at all.

Tim

re: To DEP or not to DEP …

rsw8n — Wed, 04 Nov 2009 15:09:25 GMT

What performance impact does DEP have on a Windows 2003, SQL Server 2000 environment?