Don't be overprotected by Windows XP SP2

The current WinXP users have no option to upgrade to WinXP SP2, which also allows users to unconditionally accept a security feature called DEP (Data Execution Protection). If you use a 64-bit CPU, then this protection will be more powerful, because the 64 processor uses a new anti-virus technology - EVP (Enhanced Virus Protection), with WinXP SP2 DEP technology, can The prevention and control mechanism of the virus has taken it to a new level.

However, there are compatibility issues between EVP and DEP. It may also block programs that are useful to users. For ordinary users, the first problem is to solve this problem.

1. Modify in system properties

By default, under "System Properties" under "Advanced → Settings → Data Execution Protection", select "only for basic Windows programs and services." Enable DEP." In this state, some programs do not work properly, such as Virtual PC.

If some applications do not work properly, select "Enable DEP for all programs and services except the selected ones" in the "Data Execution Protection" item, and then click "Add". , locate the installation directory of an application, find the executable file for the program, and add it. Generally, this program will run normally. The settings take effect after restarting the computer.

2. Directly modify the Boot.ini file

Locate the Boot.ini file in the root directory of the partition where the WinXP SP2 system is located. Note that it has a "NoExecute" parameter, and the previous changes to DEP in the system properties are also reflected in this parameter.

There are only two options in the "Data Execution Protection" item, which are reflected in the Boot.ini file as the "Optin" and "Opton" values ​​of the "NoExecute" parameter. However, some applications or drivers are not compatible. Even if they are "released" in "Data Execution Protection", it still does not work properly. For example: 3721 Internet Assistant, ZoneAlarm Pro, etc., it depends on " The other two values ​​of the NoExecute parameter.

NoExecute=AlwaysOff is equivalent to turning off the EVP and DEP functions. At this time, both functions will be lost. The compatibility issue caused by this feature is all solved, but there is one less security wall.