How to Manage DEP In Windows 10

Tags:
windows 10
sparkinwords
By See all their Tutorials

Enabled by default, Data Execution Prevention (DEP) is a Windows’ built-in security tool that adds an extra layer of security to your PC by preventing any unrecognized scripts from loading into the reserved areas of memory.

By default DEP is enabled globally, i.e. for all Windows’ services and programs. However, if you want, you can disable DEP – which is never suggested nor is it encouraged, or you can exclude some programs from being scanned by DEP during their execution.

Programs that you may want to exclude from DEP scanning list can also be some device drivers that Windows may consider malicious due to their digital signature status, but are safe to run on your PC.

Here’s how you can disable DEP and add programs to its exclusion list:

WARNING: Disabling DEP or adding exclusions may allow malicious scripts to execute and cause severe damage to Windows which may leave your PC in permanently unstable and/or unusable state. If you’re unsure or don’t have enough experience in handling viruses or suspicious scripts, you are strongly suggested NOT to disable DEP or add any exclusions to it.
DISCLAIMER: Neither Tom’s Hardware, nor any of its direct or indirect associates, author of this tutorial, or any other direct or indirect personnel associated, or by any means related to this tutorial or forum should be held responsible for any damage caused to your computer due to disabling DEP or adding exclusions to it. If you wish to follow the procedure given in this tutorial, do so at your own risk.
Disable DEP
  1. Launch elevated command windowType CMD in the Cortana search box, right-click Command Prompt from the Best match list, click Run as administrator, and click Yes in the User Account Control confirmation box. This launches the elevated Command Prompt window. Since this window gives you unrestricted access to your PC, you can execute the commands to make major changes to system settings.
  2. Disable DEPType BCDEDIT /SET {CURRENT} NX ALWAYSOFF in the elevated Command Prompt window, and press Enter. This executes the command on your PC. Upon successful execution, the command window displays a confirmation message.

Click Settings from the Performance section, and click Data Execution Prevention tab from the Performance Options box. This takes you to the DEP interface. Here you can notice that all the options present in the interface are grayed out, and you cannot make any changes to the DEP settings.



Enable DEP