Author Topic: internet options , advanced tab (DEP) (Read 10462 times)

carlrowley1 · « **on:** December 14, 2009, 04:27:31 PM »

The setting for "enable memory protection to help mitigate online attacks" is ticked but is greyed out
This is on my standard account.

So i take it, this setting is enabled by default,on my admin account which up until now i thought it was disabled by default.
So i said to myself if it is supposed to be disabled by default, why is it on.
I know what this setting does, and sounds to me that it should be enabled, but are there any issues why people turn it of....

Allan · « **Reply #1 on:** December 14, 2009, 04:30:11 PM »

I completely disable DEP on all systems. But that's me.

carlrowley1 · « **Reply #2 on:** December 14, 2009, 04:41:27 PM »

Quote from: Allan on December 14, 2009, 04:30:11 PM

I completely disable DEP on all systems. But that's me.

Hi Allan

I know that it could slow down your internet browsing, but thats about all i know.
I have done a quick search and found that quite alot of people have it switched of, but i don't know any reasons why yet.
without going into to much detail or a long conversation, can you give me some reasons why people don't use it

Allan · « **Reply #3 on:** December 14, 2009, 04:51:10 PM »

Hi Carl,
When DEP was first introduced with XP it frequently interfered with legitimate apps. I always make sure that all of my systems are well protected with a top AV that is always up to date, either MalwareBytes or SuperAntispyware scans, and SpywareBlaster. I'm vigilant and aware when it comes to system protection and consider myself a very knowledgeable user. Accordingly I keep UAC on quiet mode and disable DEP. As long as your system is well protected and you are conscientious about keeping it that way, it's my opinion DEP is superfluous. I do not suggest that others disable UAC or DEP, but I don't discourage it for knowledgeable users either. It's completely your call. Personally I think DEP is great for novices and overkill for others.

BTW, since I haven't used DEP for at least 5 years I don't know if MS has done anything to improve its tolerance of apps that may not be as well written as they should be.

carlrowley1 · « **Reply #4 on:** December 15, 2009, 07:23:16 AM »

Quote from: Allan on December 14, 2009, 04:51:10 PM

Hi Carl,
When DEP was first introduced with XP it frequently interfered with legitimate apps. I always make sure that all of my systems are well protected with a top AV that is always up to date, either MalwareBytes or SuperAntispyware scans, and SpywareBlaster. I'm vigilant and aware when it comes to system protection and consider myself a very knowledgeable user. Accordingly I keep UAC on quiet mode and disable DEP. As long as your system is well protected and you are conscientious about keeping it that way, it's my opinion DEP is superfluous. I do not suggest that others disable UAC or DEP, but I don't discourage it for knowledgeable users either. It's completely your call. Personally I think DEP is great for novices and overkill for others.

BTW, since I haven't used DEP for at least 5 years I don't know if MS has done anything to improve its tolerance of apps that may not be as well written as they should be.

Interesting
Nicely put allan, thanks for the quick explanation.

I might consider turning it of myself, i am well conscientious, and aware of what sites i visit, plus i do regular scans with malwarebytes, and avast .
You mention " i keep UAC on quite mode " can you tell me what quite mode is, sounds a bit like a registry tweak.

I am so used to my standard account, i don't bother much with the admin account, i just normally put up with the prompts, but i am not sure how quite mode works on a standard account, sound interesting though..

Allan · « **Reply #5 on:** December 15, 2009, 07:29:55 AM »

Here's an explanation along with a link for tweakuac, a nice little utility that permits you to change uac settings on the fly: http://www.tweak-uac.com/uac-quiet-mode/

carlrowley1 · « **Reply #6 on:** December 15, 2009, 02:49:02 PM »

Quote from: Allan on December 15, 2009, 07:29:55 AM

Here's an explanation along with a link for tweakuac, a nice little utility that permits you to change uac settings on the fly: http://www.tweak-uac.com/uac-quiet-mode/

thats great allan, just downloaded tweakUAC.exe, if anyone else uses the computer i will turn UAC back on.
Thanks for the link, i would never have known about this..

I also read how you would do this manually, is this what tweakUAC.exe does, change the values for you....
Anyway you are right its a nice little utility

Allan · « **Reply #7 on:** December 15, 2009, 02:52:36 PM »

That's all any tweaking utility does - make the registry changes for you.

carlrowley1 · « **Reply #8 on:** December 16, 2009, 01:39:28 PM »

Quote from: Allan on December 15, 2009, 02:52:36 PM

That's all any tweaking utility does - make the registry changes for you.

Hello again allan

When i do use my standard account, i am getting the UAC prompts,
I don't know how to explain it properly, but here's a snapshot, but do i need to inheirit this to the user account

Allan · « **Reply #9 on:** December 16, 2009, 01:55:23 PM »

I'm not sure I understand what you're asking Carl - and you really should not post your system username on a public forum. Are you saying you ran TweakUAC from within your account and you're still getting prompts? If so, try running it as admin and see if that helps.

carlrowley1 · « **Reply #10 on:** December 16, 2009, 02:57:14 PM »

Quote from: Allan on December 16, 2009, 01:55:23 PM

I'm not sure I understand what you're asking Carl - and you really should not post your system username on a public forum. Are you saying you ran TweakUAC from within your account and you're still getting prompts? If so, try running it as admin and see if that helps.

Sorry about that, i had no idea how to explain it, when i do use the admin account which is the hidden admin account, which i would not get the prompts anyway, but i carn't get this to work on the standard account.
Has this got anything to do with permissions

Allan · « **Reply #11 on:** December 16, 2009, 03:10:34 PM »

I don't think so. But just make the change manually:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“ConsentPromptBehaviorAdmin”

and

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“ConsentPromptBehaviorUser”

change the values to 0

carlrowley1 · « **Reply #12 on:** December 16, 2009, 03:24:16 PM »

Quote from: Allan on December 16, 2009, 03:10:34 PM

I don't think so. But just make the change manually:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“ConsentPromptBehaviorAdmin”

and

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“ConsentPromptBehaviorUser”

change the values to 0

Hello allan

Yes tryed this allan, when ever the UAC should pop up, i now get "this program is Blocked by group policy" do i have group policy on home premium

Allan · « **Reply #13 on:** December 16, 2009, 03:26:30 PM »

http://forums.pcpitstop.com/index.php?showtopic=129347

carlrowley1 · « **Reply #14 on:** December 16, 2009, 03:37:41 PM »

Quote from: Allan on December 16, 2009, 03:26:30 PM

http://forums.pcpitstop.com/index.php?showtopic=129347

Sorry allan , i am a little confused, does that link work for vista home premium also

Allan · « **Reply #15 on:** December 16, 2009, 03:50:17 PM »

Sorry - for some reason I thought you're using XP. Here you go: http://www.windowsreference.com/windows-vista/how-to-get-group-policy-editor-in-vista-home-edition/

carlrowley1 · « **Reply #16 on:** December 16, 2009, 04:13:25 PM »

Quote from: Allan on December 16, 2009, 03:50:17 PM

Sorry - for some reason I thought you're using XP. Here you go: http://www.windowsreference.com/windows-vista/how-to-get-group-policy-editor-in-vista-home-edition/

OK allan i'll give this ago.i'll try anything once

But first i already have LmCompatibility 3

But i am a bit confused when it says set it to

Create the following DWORD value (if it doesn’t exist):

LmCompatibilityLevel

and set it to:

0 – Clients use LM and NTLM authentication, but they never use NTLMv2 session security. Domain controllers accept LM, NTLM, and NTLMv2 authentication.

1 – Clients use LM and NTLM authentication, and they use NTLMv2 session security if the server supports it. Domain controllers accept LM, NTLM, and NTLMv2 authentication.

2 – Clients use only NTLM authentication, and they use NTLMv2 session security if the server supports it. Domain controller accepts LM, NTLM, and NTLMv2 authentication.

3 – Clients use only NTLMv2 authentication, and they use NTLMv2 session security if the server supports it. Domain controllers accept LM, NTLM, and NTLMv2 authentication.

4 – Clients use only NTLMv2 authentication, and they use NTLMv2 session security if the server supports it. Domain controller refuses LM authentication responses, but it accepts NTLM and NTLMv2.

5 – Clients use only NTLMv2 authentication, and they use NTLMv2 session security if the server supports it. Domain controller refuses LM and NTLM authentication responses, but it accepts NTLMv2.

Allan · « **Reply #17 on:** December 16, 2009, 04:19:34 PM »

By the way, I'm not suggesting you do any of this - I'm simply trying to respond to your questions

Be sure you have a current image of your system drive. GPEDIT is a very powerful function and it's always better to be safe than sorry.

Oh - and I believe you want to set it to zero.

carlrowley1 · « **Reply #18 on:** December 16, 2009, 04:41:38 PM »

Quote from: Allan on December 16, 2009, 04:19:34 PM

By the way, I'm not suggesting you do any of this - I'm simply trying to respond to your questions

Be sure you have a current image of your system drive. GPEDIT is a very powerful function and it's always better to be safe than sorry.

Oh - and I believe you want to set it to zero.
.

OK allan, i will have to sort out an image of the system drive first, then i'll give it a go.
Is this necessary though, even if you back up the registry, any how a few comments from that link, mentions setting it to "0" does not work either.
If setting it to "0" does not work, which it does mention that in the comments , i'll probably give it a miss all together....

Allan · « **Reply #19 on:** December 16, 2009, 04:47:03 PM »

I'm a big fan of hd imaging on a regular basis - I feel everyone should do it - especially since there are some great free imaging utilities. I'm off for the night, but I look forward to hearing how things go. To be honest, I'm surprised TweakUAC didn't work for you.

carlrowley1 · « **Reply #20 on:** December 16, 2009, 05:14:42 PM »

Quote from: Allan on December 16, 2009, 04:47:03 PM

I'm a big fan of hd imaging on a regular basis - I feel everyone should do it - especially since there are some great free imaging utilities. I'm off for the night, but I look forward to hearing how things go. To be honest, I'm surprised TweakUAC didn't work for you.

OK, allan
I will try to find out a little more, with it saying "not inheirited" may be i can get this "inheirited" in some way using the permissions.
I am not sure, but i thing you can copy the permissions, from the admin account to the specific user.
But i'am off now anyway, i'll try to find out some more info..............

carlrowley1 · « **Reply #21 on:** December 18, 2009, 04:30:02 PM »

Hello again

Can you just look over this for me, and see if it would be ok to follow.

http://www.techmynd.com/enable-grouppolicy-gpedit-for-windows-vista-home/

Allan · « **Reply #22 on:** December 18, 2009, 04:32:02 PM »

Do you mean copying the files from one Vista edition to another? Sure, that should work fine.

carlrowley1 · « **Reply #23 on:** December 18, 2009, 10:07:39 PM »

Quote from: Allan on December 18, 2009, 04:32:02 PM

Do you mean copying the files from one Vista edition to another? Sure, that should work fine.

Yeah allan, a fiend of mine has vista ulimate over the road, so i thought i would give this a try, if i get stuck on anything i'll post back...

Computer Hope Forum

News:

Author Topic: internet options , advanced tab (DEP) (Read 10462 times)

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

Allan

carlrowley1

carlrowley1

Allan

carlrowley1