Understanding Data Execution Prevention

Written by Barry Dysert (last updated April 8, 2019)

3

Data Execution Prevention (DEP) is a security feature built into the Windows operating system. It is designed to close programs that it detects as viruses or other security threats. Depending upon your CPU, DEP runs in either a hardware-enhanced mode or a software-enhanced mode.

By default, DEP works on certain Windows programs and services. You can, however, customize DEP to have it monitor other programs as well. To do this (if you are using Windows 7), click the Start button, then right-click Computer and select Properties. If you are using Windows 10, navigate to the Control Panel, click System and Security and then click System. This brings up the following screen: (See Figure 1.)

Figure 1. The Computer Properties screen.

Click the Advanced System Settings link at the left of the screen, and Windows displays the Advanced tab of the System Properties dialog box. (See Figure 2.)

Figure 2. The Advanced tab of the System Properties dialog box.

In the Performance group, click Settings. Windows displays the Performance Options dialog box. Make sure the Data Execution Prevention tab is selected. (See Figure 3.)

Figure 3. The Data Execution Prevention tab of the Performance Options dialog box.

Note that this is showing the Data Execution Prevention tab, and as you can see, the default action is already selected. If you want to turn on DEP for all programs and services except those you specify, click the second radio button. This enables the Add button. When you click Add, a file browser opens to allow you to select which programs should not be checked by DEP. (You cannot add an essential Windows program or service to be precluded.) When you're satisfied when your selections, OK your way out.

 This tip (12480) applies to Windows 7 and 10.

Author Bio

Barry Dysert

Barry has been a computer professional for over 35 years, working in different positions such as technical team leader, project manager, and software developer. He is currently a software engineer with an emphasis on developing custom applications under Microsoft Windows. When not working with Windows or writing Tips, Barry is an amateur writer. His first non-fiction book is titled "A Chronological Commentary of Revelation." ...

MORE FROM BARRY

Changing a Computer's Name

If you don't like the name that was assigned to your computer when it was put together, it's pretty easy to change. This ...

Discover More

Refreshing the Explorer Window

It's possible that the Windows Explorer window may occasionally get out of sync with the data it's displaying. You can ...

Discover More

Understanding the Music Folder

The Music folder is one of several system libraries specifically optimized to hold digital music. This tip tells you ...

Discover More
More WindowsTips

Understanding Windows SIDs

This tip presents some information about Windows SIDs (Security Identifiers) and shows you some tools that you can use to ...

Discover More

Understanding Action Center

Action Center provides you with a quick overview of security and maintenance issues and allows you to drill down to the ...

Discover More

Limiting the Number of Login Attempts

You probably don't want to allow someone to continually attempt to login to your system until they finally guess your ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is two more than 7?

2019-04-08 21:03:57

Jon Hollmann

The article didn't say which to add, just how to add.


2019-04-08 11:05:09

Malcolm

The original comment was to the effect that an example or two of the sort of program to add to the exceptions list from the "all programs" choice, and the sort of programs one should definitely consider adding.


2019-04-08 10:54:01

Malcolm

One or two examples of the kind of programs one might consider adding would add to one's understanding of this feature - plus a comment on how one make one-off exceptions while leaving the general exception unchanged.


Newest Tips