Disable DEP and Enable PAE

back

Disable DEP and Enable PAE in the software level of XP and VISTA using these commands:

VISTA at a terminal cmd line execute these commands:

bcdedit /set {current} nx AlwaysOff

bcdedit /set {current} pae ForceEnable

XP and Server 03 by using a boot.ini switch, edit the boot.ini either in windows sytem access or on disk:

/noexecute=alwaysoff /pae

The /PAE switch is critical in either vista or xp.

TEST the settings after a cold boot using both of the blue commands below:

To determine the current DEP hardware support policy:

At the command prompt, type the following command, and then press ENTER:

wmic OS Get DataExecutionPrevention_Available

If the output is “TRUE,” hardware-enforced DEP is available. It is reporting the setting to windows and it may or may not be contravened by bios settings. Only a Mobo or bios guide will usually reveal the settings.

At the command prompt, type the following command, and then press ENTER:

wmic OS Get DataExecutionPrevention_SupportPolicy

The value returned will be 0, 1, 2 or 3. This value corresponds to one of the DEP support policies that are described below:

Data Execution Prevention: 2
Support Policy: OptIn (default configuration)
Property Value: Only Windows system components and services have DEP applied

Data Execution Prevention: 3
Support Policy: OptOut
Property Value: DEP is enabled for all processes. Administrators can manually create a list of specific applications which do not have DEP applied

Data Execution Prevention: 1
Support Policy: AlwaysOn
Property Value: DEP is enabled for all processes

Data Execution Prevention: 0
Support Policy: AlwaysOff
Property Value: DEP is not enabled for any processes

After a COLD BOOT of the computer, if DEP’s supportpolicy property is set to 0, then DEP has been disabled in software. This will typically override for Windows the effect of hardware DEP but NOT in all cases.

back