Windows Vista: Data Execution Prevention is Not a Real Security Feature

by Scott Allen

Anyone who’s spent more than a minute with me online or off, will know of the extreme distaste I have for Microsoft Windows Vista. I have been a bilingual power user of both PC’s and Mac’s since I was young. I have to use both platforms at a high level in my line of work. In my opinion, Windows XP is Microsoft’s best system thus far. (Of course, it’s not even close to Mac OS, but hey, I’ve learned to lower my expectations from Microsoft.) Vista on the other hand is terrible. It’s not only a memory hog — it’s slow, buggy, inefficient, doesn’t play well with multiple processors, need I go on?

By far, what annoys me the most is the “security feature” Data Execution Prevention (DEP). It’s supposed to prevent programs from executing operations that could potentially put the system at risk. Sounds good on paper, and I’m sure it was well-intentioned, but in reality it shuts down many valid programs and operations, making it impossible to complete day-to-day tasks.

Some of the important programs it regularly shuts down include: Firefox (seriously, what a nice under-the-radar way to kill off Internet Explorer’s competition!), setup programs for new software I’m trying to install, Windows’ own WIFI process (yes, with DEP Microsoft stops it’s OWN software, preventing me from being able to connect to my router and the Internet - HOW AWESOME!), to name a few.

Hey Microsoft, FYI: When a “security feature” shuts down some of the main programs I need to use on a daily basis, it’s not a real a security feature.

Turn DEP Off

If you use Vista for any length of time it will likely be necessary to shut DEP down, at least a once in a while. Here’s how:

1. To start, you’ll need to run a command prompt with administrative privileges.
   Go to the Start Menu, choose “All Programs”, then click on “Accessories”, and right-click on the “Command Prompt” shortcut, selecting “Run As Administrator”.
    
2. Type in the following line to disable Data Execution Prevention (DEP):

   bcdedit.exe /set {current} nx AlwaysOff

   You can either leave it off, or keep your command prompt open, run your desired setup or other process being killed by DEP, and turn it back on.
    

3. To turn it back on, repeat step 1 and type:

   bcdedit.exe /set {current} nx AlwaysOn

Now you can take back a little control from your operating system.

 

If you enjoyed this post, make sure you subscribe to the RSS feed!

 Email This to a Friend

 Print This Post

Related Posts:

Feature Suggestion: Web Browser Mute Button

Web Site Security - Bot Traps

Cyber-Surveillance and Internet Data-Mining

Examining Logs and Sharing Knowledge Can Help Expose Security Flaws

Improve Site Security and SEO with One Line of Code