Turn off Data Execution Prevention for ExplorerID: oval:gov.nist.usgcb.windowsseven:def:291 | Date: (C)2012-04-13 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
This policy setting allows you to turn off the Data Execution Prevention feature for Internet Explorer on Windows Server 2008, Windows Vista SP1 and Windows XP SP3.
If you enable this policy setting, Internet Explorer will not opt-in to Data Execution Prevention on platforms that support the SetProcessDEPPolicy API.
If you disable or do not configure this policy, Internet Explorer will use the SetProcessDEPPolicy API to turn on Data Execution Prevention protection on platforms that support the API.
This policy has no effect if Windows has been configured to enable Data Execution Prevention.
Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Explorer\Turn off Data Execution Prevention for Explorer
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer!NoDataExecutionPrevention
Platform: |
Microsoft Windows 7 |