IIS: How to disable Data Execution Prevention in Windows Server 2008?

Question

I've been trying to disable DEP on my windows 2008 dev box and have not succeeded.

I've tried: System Properties->Performance Options->Data Execution Prevention->Turn on DEP for essential Windows programs and services only

(still happens)

System Properties->Performance Options->Data Execution Prevention->Turn on DEP for all programs and services except those I select

in this case, i tried to choose both inetinfo.exe and w3wp.exe in the c:\windows\system32\inetsrv\ folder, and when selected, I receive this error:

"You can not set DEP attributes on 64-bit executables".

I'm sure that there is some memory leak somewhere - but that is a separate problem. I'm happy to live with it for a while in my development environment (in fact that is where I need to let it go so I can see it)

Any help would be appreciated!

Thx, Doug

What does (still happens) mean? What are you observing? What do you expect? — Nick Meyer, Jul 30 '09 at 20:21
Running a system without DEP on is like driving without wearing a seatbelt...Why would you want to? — Robert Harvey, Jul 30 '09 at 20:21

gbn · Accepted Answer · 2009-07-30T20:35:30.297

8

The GUI does not show the 4 modes of DEP operation.

You need to do it at boot time:Boot Parameters to Configure DEP and PAE

However, more info on the error message:

System DEP configuration settings apply only for 32-bit applications and processes when running on 32-bit or 64-bit versions of Windows. On 64-bit versions of Windows, if hardware-enforced DEP is available it is always applied to 64-bit processes and kernel memory spaces and there are no system configuration settings to disable it.

edited Jul 30 '09 at 20:35

answered Jul 30 '09 at 20:22

gbn

422,506
82
585
676

Downvoted. Solution should be explained here, not linked externally (link has since moved). – Joe Coder Nov 19 '15 at 05:19

score 6 · Answer 2 · edited Dec 06 '11 at 14:28

6

Here is how to disable DEP at the command prompt:

BCDEDIT /set {current} nx AlwaysOff

edited Dec 06 '11 at 14:28

John Conde

217,595
99
455
496

answered Dec 06 '11 at 14:23

Brian C.

61
1
1

score 4 · Answer 3 · edited Apr 29 '14 at 21:00

4

On Windows Vista and later, DEP and PAE are enabled at boot time and are configured by setting values for the nx and pae parameters using the BCDEdit /set command.

To disable DEP on Windows Server 2008 type the following on an elevated Command Line

bcdedit /set nx AlwaysOff

edited Apr 29 '14 at 21:00

Ed Bayiates

11,060
4
43
62

answered Jul 15 '11 at 19:38

Satish

41
1

score 1 · Answer 4 · answered Sep 01 '09 at 19:19

1

you would want to edit boot.ini and change a section contaning /noexecute=optin to just /execute

answered Sep 01 '09 at 19:19

score 0 · Answer 5 · answered Jul 30 '09 at 20:20

0

You should be able to turn DEP off in one of your BIOS settings.

answered Jul 30 '09 at 20:20

zdan

28,667
7
60
71

Hardware NX/xD bit only, Software DEP may still be enforced. – gbn Jul 30 '09 at 20:25

IIS: How to disable Data Execution Prevention in Windows Server 2008?

5 Answers5

Linked