DEP data execution protection parameter settings

According to the startup parameters, the DEP working status can be divided into four types. Www.dnzg.cn
(1) Optin: By default, DEP protection is only applied to Windows system components and services. It is not protected for other programs, but users can use the Application Compatibility Toolkit (ACT, Application Compatibility Toolkit). The selected program enables DEP, and the program compiled under the Vista /NXcompat option under Vista will automatically apply DEP. This mode can be dynamically closed by the application, it is mostly used for the normal user version of the operating system, such as Windows XP, Windows Vista, Windows7. (2) Optout: Enables DEP for all programs and services except the exclusion list program. Users can manually specify programs and services that do not enable DEP protection in the exclusion list. This mode can be dynamically turned off by the application, which is mostly used for server-based operating systems such as Windows 2003 and Windows 2008. (3) AlwaysOn: Enables DEP protection for all processes. There is no sorted list. In this mode, DEP cannot be turned off. Currently, it works only in AlwaysOn mode on 64-bit operating systems. (4) AlwaysOff: DEP is disabled for all processes. In this mode, DEP cannot be dynamically enabled. This mode is generally only used in certain situations, such as DEP interferes with the normal operation of the program. Remarks: DEP: "Data Execution Prevention" abbreviation, data execution protection. EDB: "Execute Disable Bit", abbreviated as memory protection technology developed by Intel. EVP: “Environmental Virus Protection” acronym for enhanced virus protection, developed by AMD.