Page 1 of 1

Detecting DEP (Data Execution Prevention) Status

Posted: Fri May 25, 2007 6:43 am
by H4nd0
Is there anyway to detect the status of DEP with IA? I want to be able to warn the user of the DEP status and either correct the DEP configuration or add our executables to the DEP exclusion list. More info here:

http://forums.firedaemon.com/viewtopic.php?t=55

Another handy thing to know...

Posted: Tue Jun 05, 2007 2:02 pm
by SteveDude
This would be another great addition to IA. Wouldn't mind knowing this one myself.

Posted: Fri Jun 08, 2007 5:16 am
by Tinus
I don't mind about the state of DEP. I simply add my exe to the exclusion list using a registry key like this:

Code: Select all

Write Registry Key HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\AppCompatFlags\\Layers\\$TARGETDIR$\\<YourAppHere>.exe, DisableNXShowUI


If DEP is disabled and enabled later on, my app is in the exclusion list. If DEP is active you have to reboot to make it work.
My installer already needs to reboot, so this is no additional problem for my app.

This works (at least) on Windows XP and Server 2003.

That works

Posted: Fri Jun 08, 2007 9:09 am
by SteveDude
Tinus,

Thanks for the trick. That's a start for a good workaround. It would still be nice to know if it is on so you could set the Reboot Flag in the install. Could be just another setting hidden somewhere.

SteveDude

Posted: Sat Jun 23, 2007 1:15 am
by H4nd0
Thanks for the tip but it doesn't appear to work on Vista nor on x64 machines.

Posted: Mon Jun 25, 2007 1:00 am
by H4nd0
I correct myself. It does appear to work but you have to flip the installer into 64-bit mode before you write the reg variables on an x64 box.