Security policy restrictions exist in Win2000/XP.

Source: Internet
Author: User

Currently, the WinXP user has been selectively upgraded to WinXP SP2, which also allows the user to unconditionally accept a security protection function called DEP (Data Execution Protection. If you use a 64-bit CPU, this protection function will be more powerful, because the 64-bit processor uses a new anti-virus technology-EVP (enhanced virus protection ), with the DEP Technology of WinXP SP2, the virus prevention mechanism can be upgraded to a new level.
However, EVP and DEP also have compatibility issues. It may also block programs that are useful to users. For common users, this problem must be solved first.

1. Modify system attributes

By default, in "Advanced → settings → Data Execution Protection" under "System Properties", "Only Enable DEP for basic Windows programs and services" is selected ". In this state, some programs cannot run normally, such as Virtual PC.

If some applications do not run properly, select "enable DEP for all programs and services except the following selected programs" in "Data Execution Protection ", click Add to go to the installation directory of an application, find the executable file of the application, and add it in. Generally, this program runs normally. After the computer is restarted, the settings take effect.

2. directly modify the Boot. ini file

Find the Boot. ini file in the root directory of the partition where the WinXP SP2 system is located. Note that it has an additional "NoExecute" parameter, and the previous modification to DEP in system properties will also be reflected in this parameter.

There are only two options in the "Data Execution Protection" item, which are reflected in the Boot. ini file as the "Optin" and "Opton" values of the "NoExecute" parameter. However, some applications or drivers are not compatible. Even if they are "Allowed" in "Data Execution Protection", they still cannot run normally, for example: 3721 of Internet assistants and ZoneAlarm Pro depend on the other two values of the "NoExecute" parameter.

NoExecute = AlwaysOff is equivalent to disabling the EVP and DEP functions. At this time, both functions will be lost. The compatibility issues caused by this function are all solved, but a security protection wall is missing.

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.