Overview

Sometimes, old code doesn't seem to work with the new Data Execution Prevention feature in Microsoft Windows.  It's easy to turn it off for non-system applications and services, but how do you do it for system components, and why would you?

Warning: Data Execution Prevention is a security feature.  Disabling DEP reduces the security of your system.

Context

On our Microsoft Commerce Server 2002 system, running on Windows Server 2003, we were getting "COM Surrogate" errors, which relate to DEP errors with the dllhost.exe system program.  Adding it to the exception list didn't solve our problem.

Solution

Thankfully, Microsoft has written an article on how to turn off DEP for an entire server.  For this case, you need to add the following option:

/noexecute=AlwaysOff

to your boot.ini file.

See A detailed description of the Data Execution Prevention (DEP) feature in Windows XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003 (Microsoft Support) for further information.

Versions

Metadata


Bookmark with :
Digg It! DZone StumbleUpon Technorati Reddit Del.icio.us Newsvine Furl Blinklist
posted @ Tuesday, January 08, 2008 3:10 PM | in Security Commerce Server Windows Server IT Management

Comments

No comments posted yet.

Post Comment

Title *
Name *
Email
Url
Comment *  


Please add 4 and 4 and type the answer here: