IE 8 installed Data Execution Prevention - how to turn this off

[grofaty]

Hi,
using Windows XP SP3 I installed Internet Explorer 8. Now when I try to visit company web server that is using Java Run-time Environment I get info that browser is protecting me using Data Execution Prevention.

Info is: "To help protect your computer, Windows has closed this program."

I have looked into Control Panel | System | Advanced | Settings at Performance section | Data Execution Prevention tab and there are only two settings:
- Turn on DEP for essential Windows programs and services only (default settings)
- Turn on DEP for all programs and services except those I select: I selected Internet Explorer (check box checked)

Where is Turn off! this settings? Is there any settings I can set for some IP addresses (my company servers) to allow execution without this DEP?

Regards

 

[smah]

That sounds a bit strange that this only happens since installing IE8. What version of Java is being used? And does it happen if you turn on IE's compatability mode?

 

[grofaty]

Hi,
with IE7 it was working ok, but today I have installed IE8 and try out and this error appeared. The above two settings:
1. Turn on DEP for essential Windows programs and services only - IE8 after visiting web page I got only button
"close message".
2. Turn on DEP for all programs and services except those I select: I selected Internet Explorer (check box checked) (I have rebooted Windows as message suggest) - IE8 offers two options: "close message" and "change settings". I already have "Internet Explorer" in this settings and it is strange that it offers me to block something that is already blocked.

What I want is to turn off completly this feature. How to compleatly shut down this feature?

I use JRE 1.3.1_09 - this is the only JRE that correctly displays data.

 

[smah]

I would suggest that you first try compatibility view and updating to JRE 1.6.0_12 (the current version)

You're number 2 option really only allows you to exclude the third party programs of your choice, I don't believe that it allows you to exclude an essential windows program.

 

[grofaty]

Hi,
I have tried compatibility mode and the same error appears. I can't user any other JRE than 1.3.1_09, because all other JREs have a corrupted displaying of tree hierarchy. I have tried ALL!!! of the JREs and none of them works correctly. This is one of my ages old problem that Sun does not solve.

By the way, I have found out how DEP can be turned off. In c:\boot.ini file I have changed /NOEXECUTE option from /NOEXECUTE=OPTIN to /NOEXECUTE=ALWAYSOFF and now this Java applet works fine. Problem solved.
Regards

 

[BadBigBen]

Where is Turn off! this settings?

In the BOOT.INI file...

Available switch options for the Windows XP and the Windows Server 2003 Boot.ini files

http://support.microsoft.com/default.aspx?scid=kb;en-us;833721

I use JRE 1.3.1_09

That is probably why you are getting the message in the first place, it is ANCIENT and full of security holes...

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.

 

[grofaty]

Hi,
according to web page

http://blogs.msdn.com/ie/archive/2008/04/08/ie8-security-part-I_3A00_-dep-nx-memory-protection.aspx

there is settings:
Tools > Internet Options > Advanced > “Enable memory protection to help mitigate online attacks”
but in my case this option is disabled.

In boot.ini I have set back to:
/NoExecute=OptIn

Control Panel | System | Advanced | Settings at Perofmance | Advanced | Data Execution Prevention
is set to "Turn on DEP for essential Windows programs and services only".

Any idea why the Tools... "Enable memory..." is grayed out?
Regards

 

[grofaty]

Hi,
I have found out why this "Enable memory protection to help mitigate online attacks" was grayed out. It gets grayed out if you don't start Internet Explorer 8 with administrator rights. So I have run IE with Administrator and this option can be disabled.

I have rerun my applet and it is working fine.

What I hate is, I have two days spent to figure this out. What an excellent Microsoft documentation.
Regards

 

[BadBigBen]

LOL... no wonder I could not completely figure out the angle you where coming from, since on my system I am running as admin...

glad you found the solution though...

Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

How to ask a question, when posting them to a professional forum.

 

[grofaty]

BadBigBen,
I am also logged into Windows XP with administrator account, but I am using DropMyRights, Microsoft program.

This program allows to run any program inside Administrator account with user privileges. For example I run Internet Explorer with only "User" privileges inside Administrator account. This drastically reduces virus, spy etc software.

Read more:

http://news.cnet.com/8301-13554_3-9756656-33.html

http://msdn.microsoft.com/en-us/library/ms972827.aspx