Microsoft KB Archive/899298

= The &quot;Understanding Data Execution Prevention&quot; help topic incorrectly states the default setting for DEP in Windows Server 2003 Service Pack 1 =

Article ID: 899298

Article Last Modified on 10/6/2006

-

APPLIES TO

 Microsoft Windows Server 2003 Service Pack 1, when used with:  Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)

 Microsoft Windows Server 2003, Standard Edition (32-bit x86)

 Microsoft Windows Server 2003, Web Edition 

-

<div class="notice_section">

<div class="symptoms_section">

SYMPTOMS
The &quot;Understanding Data Execution Prevention&quot; help topic in Microsoft Windows Server 2003 with Service Pack 1 (SP1) contains the following incorrect entry:

By default, DEP is only turned on for essential Windows operating system programs and services. To help protect more programs with DEP, select Turn on DEP for all programs and services except those I select.

By default, in Windows Server 2003 SP1, DEP is turned on for all programs and services except those that the administrator selects. By default, the &quot;Turn on DEP for all programs and services except those I select&quot; OptOut policy is already selected.

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

<div class="moreinformation_section">

MORE INFORMATION
If you are logged on as an administrator, you can manually configure DEP to switch between the OptIn and OptOut policies by using the Data Execution Prevention tab in System Properties.

To verify your settings, follow these steps:
 * 1) Click Start, click Run, type sysdm.cpl in the Open box, and then click OK.
 * 2) Click the Advanced tab, and then click Settings under Performance.
 * 3) Click the Data Execution Prevention tab, and then use one of the following procedures:
 * 4) * Click Turn on DEP for essential Windows programs and services only to select the OptIn policy.
 * 5) * Click Turn on DEP for all programs and services except those I select to select the OptOut policy, and then click Add to add the programs that you do not want to use the DEP feature.
 * 6) Click OK two times.