>With the update done tonight on a Windows Server 2003, I have this DEP program running all over the place complaining every 10 seconds against the Microsoft IIS Worker Process. I cannot stop it from complaining. If I click Close Message, it keeps bouncing back. This is very irritating. How to get rid of that?

Here what I found:

1. Right-click on "My Computer" and select the Properties page.
2. On the Properties page, select the "Advanced" tab, and click on the "Settings" button in the "Performance" section.
3. On the Performance Options page, select the "Data Execution Prevention" tab.
4. Use the "Add" button on this page to add the affected services to the opt out list.
5. Click "OK" on each of the pages when finished and reboot the system.


Another option is to modify the "/NoExecute" switch in the Windows BOOT.INI file. The table below defines the four system-wide configurations for both hardware-enforced and software-enforced DEP:
Configuration

Description
OptIn
This setting is the default configuration. On systems with processors that can implement hardware-enforced DEP, DEP is enabled by default for limited system binaries and programs that "opt-in." With this option, only Windows system binaries are covered by DEP by default.

OptOut
DEP is enabled by default for all processes. You can manually create a list of specific programs that do not have DEP applied by using the System dialog box in Control Panel. Information technology (IT) professionals can use the Application Compatibility Toolkit to "opt-out" one or more programs from DEP protection. System compatibility fixes, or shims, for DEP do take effect.


AlwaysOn
This setting provides full DEP coverage for the whole system. All processes always run with DEP applied. The exceptions list to exempt specific programs from DEP protection is not available. System compatibility fixes for DEP do not take effect. Programs that have been opted-out by using the Application Compatibility Toolkit run with DEP applied.

AlwaysOff
This setting does not provide any DEP coverage for any part of the system, regardless of hardware DEP support. The processor does not run in PAE mode unless the /PAE option is present in the Boot.ini file.