BoardBabe Posted January 22, 2006 Posted January 22, 2006 Could someone please explain to me wether this should be set to AlwaysOn or default settings? Seems to me AlwaysOn would be best for a more secure system?
jcarle Posted January 22, 2006 Posted January 22, 2006 It's a toss up. It's to prevent malicious code from running in non-authorized sections of memory (hence the so famous Buffer Overflow vulnerability)... yet, it's debatable as to wether or not it's effective or even useful.
RogueSpear Posted January 22, 2006 Posted January 22, 2006 I've experienced some problems with DEP. Nothing too serious, but it's not perfect either. One issue that is readily recreated it to install Adobe Audition V1.5. For some reason it always throws up a DEP error which crashes the Windows Installer service. Luckily the app is already installed so it isn't a real showstopper, but it does make silent installs problematic.Something I discovered though is that when I made my switchless silent installer for Audition, when I run the installer from svcpack.inf, there is no DEP error. So I'm guessing that DEP is not yet active at that point. In order to get the most of out of DEP, you need to have a CPU that contains the hardware support for running the full version (XP supports a more limited software implementation which is what is installed by default).I think there is potential for DEP to be a good thing, but it really needs further maturity. As it stands now, I don't see much benefit in running it at a level above the default.
BoardBabe Posted January 22, 2006 Author Posted January 22, 2006 Thank you for your reply. I will leave the setting at default after this new information.
cluberti Posted January 22, 2006 Posted January 22, 2006 (edited) yet, it's debatable as to wether or not it's effective or even useful.Well, DEP (hardware) did a very good job of keeping the latest WMF exploits from running on both 32bit and 64bit Windows machines. I'm not sure I recommend full system DEP for 32bit systems simply because of the need to about double usage in both your kernel paged and nonpaged pool resources to monitor all of the areas DEP monitors, but on a 64bit system there's really no need not to (unless you have a specific application that has issues). Edited January 22, 2006 by cluberti
BoardBabe Posted January 22, 2006 Author Posted January 22, 2006 Ok, so keeping in mind I myself run a 2Ghz Pm laptop I should keep it at default.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now