Text 66025, 80 rader
Skriven 2011-07-17 17:16:00 av Ed Vance (6906.windowsa)
  Kommentar till text 66009 av LEE GREEN (1:102/401)
Ärende: DEP - Securable
=======================
LG>-> I haven't changed my BOOT.INI file yet, I'm still waiting to read any
LG>-> comments about my first DEP message but haven't see any yet.

LG>-> One thought that has came into my mind is why go through the complicated
LG>-> procedure that I read on the Microsoft web site to change BOOT.INI in
LG>-> Notepad when I could change it in Notepad by opening it up and editing
LG>-> it the normal way.

LG>-> I guess there is probably some hidden thing in XP that it had to be done
LG>-> the way MS says instead of just going ahead and editing the BOOT.INI in
LG>-> Notepad.

LG>-> Anybody know?

LG>I have always dealt with DEP via
LG>Control Panel|System|Advanced|Settings|Data Execution Prevention

Lee,

In my first DEP message I mentioned that I changed the setting from DEP
only checking System files to checking All files but my BOOT.INI setting
wasn't changed to noexecute=AlwaysOn as the MS article I read was
talking about.

I would Much Rather DEP check 'Everything' on my computer if it was
going to check anything at all.

To only have it checking the System files, to me, doesn't help keep me
safe because I download and run programs all the time and I want DEP
checking them too!

LG>You have to have a CPU that supports hardware based DEP (mine doesn't)
LG>or use the above in Windows to help stop attacks.

My CPU is a AMD 3800+ and Gibsons Research's Securable reports that
hardware based DEP is supported, so I want it! AND I want EVERYTHING
checked by DEP!    ;-)

I just want to check with the people here before I change my BOOT.INI
using the instructions I read in XP help&support.

Here is the text I read from MS again:

QUOTE

To configure DEP to switch to the AlwaysOn policy by using the Boot.ini file, f
Click Start, right-click My Computer, and then click Properties.
Click the Advanced tab, and then click Settings under the Startup and Recovery
In the System startup field, click Edit. The Boot.ini file opens in Notepad.
In Notepad, click Find on the Edit menu.
In the Find what box, type /noexecute, and then click Find Next.
In the Find dialog box, click Cancel.
Replace policy_level with AlwaysOn.

WARNING Make sure that you enter the text accurately. The Boot.ini file switch
/noexecute=AlwaysOn
In Notepad, click Save on the File menu.
Click OK two times.
Restart the computer.

UNQUOTE

As I said above, my changing DEP using:

LG>Control Panel|System|Advanced|Settings|Data Execution Prevention

didn't change the BOOT.INI settings from - /noexecute=optin /fastdetect
to - /noexecute-AlwaysOn

And I still can't figure out why MS wants me to change BOOT.INI with
Notepad in such a convulated way when I could just open BOOT.INI in
Notepad and edit the file.  Strange things happening here in the Vances
computer shack.   ;-)

Thanks for trying to help me out.


 * SLMR 2.1a #T348 * What's a haunted chicken? A poultry-geist.
--- SBBSecho 2.12-Linux
 * Origin: telnet & http://cco.ath.cx - Dial-Up: 502-875-8938 (1:2320/105.1)