Enabling Data Execution Prevention using a Task Sequence for Windows 7 Rollout
Dear All, I am currently at a customer site. The customer would like to enable Data Execution Prevention (DEP) using a Task Sequence command. The commandline is called bcdedit /set nx OptOut. In the SMSTS.LOG I can see that the command is being executed and that there are no error messages (the Operating System itself is generating a sucessful confirmation, in this case in German "Der Befehl wurde erfolgreich ausgeführt"). However once the Task Sequence has completed and Windows 7 is starting, the DEP functionality is not enabled. Has anyone ever tried to accomplish this using a Task Sequence and if yes what would be the correct way to proceed. I tried to look this case up in Google and the Search function but unfortunately nothing turned up. Looking forward to your reply. Regards, Nils
November 3rd, 2010 10:39am

I believe to enable DEP you should use the below cmd line options. bcdedit.exe /set {current} nx AlwaysOn Thanks, BrandonBrandon Linton |http://myitforum.com/cs2/blogs/brandonlinton/default.aspx | MCTS - SCCM, MDT, AD
Free Windows Admin Tool Kit Click here and download it now
January 3rd, 2011 9:10pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics