DEP exception settings- disappeared - where are they held?
Hi, I suddenly found my DEP exceptions had been cleared - about 10 or 12 I think. I'd like to know where these are held so I can back them up/restore them.
(I didn't want to use System Restore 'cos I didn't know when they had been lost, and the wider implications of System Restore).
I've tried a number of experiments to locate these, e.g. comparing registry snapshots before and afterwards, monitoring C:\ for changes, using Process Monitor. I think I know which process runs to change an exception, but haven't managed to work out what
it does.
Ideas welcome.. thanks!
August 19th, 2012 3:36am
Hi, I can finally answer my own question:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
appears to be where the list is recorded.
Using Process Monitor with careful filtering, after several attempts, a list of exactly the exe's recorded as exceptions appears.D A Lawrie
Free Windows Admin Tool Kit Click here and download it now
August 19th, 2012 1:26pm