Security policy restrictions exist in Win2000/XP.

Currently, the WinXP user has been selectively upgraded to WinXP SP2, which also allows the user to unconditionally accept a security protection function called DEP (Data Execution Protection. If you use a 64-bit CPU, this protection function will be more powerful, because the 64-bit processor uses a new anti-virus technology-EVP (enhanced virus protection ), with the DEP Technology of WinXP SP2, the virus prevention mechanism can be upgraded to a new level.
However, EVP and DEP also have compatibility issues. It may also block programs that are useful to users. For common users, this problem must be solved first.

1. Modify system attributes

By default, in "Advanced → settings → Data Execution Protection" under "System Properties", "Only Enable DEP for basic Windows programs and services" is selected ". In this state, some programs cannot run normally, such as Virtual PC.

If some applications do not run properly, select "enable DEP for all programs and services except the following selected programs" in "Data Execution Protection ", click Add to go to the installation directory of an application, find the executable file of the application, and add it in. Generally, this program runs normally. After the computer is restarted, the settings take effect.

2. directly modify the Boot. ini file

Find the Boot. ini file in the root directory of the partition where the WinXP SP2 system is located. Note that it has an additional "NoExecute" parameter, and the previous modification to DEP in system properties will also be reflected in this parameter.

There are only two options in the "Data Execution Protection" item, which are reflected in the Boot. ini file as the "Optin" and "Opton" values of the "NoExecute" parameter. However, some applications or drivers are not compatible. Even if they are "Allowed" in "Data Execution Protection", they still cannot run normally, for example: 3721 of Internet assistants and ZoneAlarm Pro depend on the other two values of the "NoExecute" parameter.

NoExecute = AlwaysOff is equivalent to disabling the EVP and DEP functions. At this time, both functions will be lost. The compatibility issues caused by this function are all solved, but a security protection wall is missing.