Since deploying EMET 5.2 via group policy and taking standard application default values exept for EAF on IE 11 (So IE opens in Windows 10), I have an issue with Photoshop 12.0.4.0 opening on a users Windows 7 Professional workstation. The event log error is:
Faulting application name: Photoshop.exe, version: 12.0.4.0, time stamp: 0x4d9d8cbc
Faulting module name: EMET.DLL, version: 5.2.0.1, time stamp: 0x5503c3e4
Exception code: 0xc0000005
Fault offset: 0x00066011
Faulting process id: 0x2154
Faulting application start time: 0x01d0df38094e67d3
Faulting application path: C:\Program Files (x86)\Adobe\Adobe Photoshop CS5\Photoshop.exe
Faulting module path: C:\Windows\AppPatch\EMET.DLL
Report Id: 4b0b4387-4b2b-11e5-a484-90b11c6babbe
What would be the first thing you would change in EMET under the group policy to take off of Photoshop.exe? Would it be EAF, because that fixed IE 11. Would it be something else? There's multiple things it could be, but whats the most common protection that may solve this so I don't spend hours updating group policy, gp refreshes and testing?