I have rolled out EMET 4.1 and configure it from Group Policy. I made a mistake of enabling the "Default Protection for recommended software" setting.
This causes a problem with outlook and the stackpivot mitigation.
I have disabled the setting in GPO and instead added an Application Configuration for Oulook with the -StackPivot switch.
But now all my computers show both settings when running emet_conf --list - it seems like the "Default protection...." setting is sticky. (I have run gpupdate and emet_conf --refresh)!
So if i have configured oulook.exe - StackPivot and Outlook is also enabled through "Default protection...." (with StackPivot) which one of the settings will be used by EMET?
Or how can I get rid of the sticky settings from "Default protection...."?