G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.general (More info?)

[boot loader]
timeout=5
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
Professional" /noexecute=optin /fastdetect /sos

Hi, what does noexecute=optin in the above mean.

thanks in advance to all

Nij
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.general (More info?)

Windows XP Service Pack 2 Memory Protection Technologies
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2mempr.mspx

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

-------------------------------------------------------------------------------------------

"nij" wrote:

| [boot loader]
| timeout=5
| default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
| [operating systems]
| multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
| Professional" /noexecute=optin /fastdetect /sos
|
| Hi, what does noexecute=optin in the above mean.
|
| thanks in advance to all
|
| Nij
 

galen

Distinguished
May 24, 2004
1,879
0
19,780
Archived from groups: microsoft.public.windowsxp.general (More info?)

In news:E23C57CB-64F3-4D0E-BE54-C56D119CA4CE@microsoft.com,
nij <nij@discussions.microsoft.com> had this to say:

My reply is at the bottom of your sent message:

> [boot loader]
> timeout=5
> default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
> [operating systems]
> multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP
> Professional" /noexecute=optin /fastdetect /sos
>
> Hi, what does noexecute=optin in the above mean.
>
> thanks in advance to all
>
> Nij

From here:

http://www.sysinternals.com/Information/bootini.html

/NOEXECUTE
This option is only available on 32-bit versions of Windows when running on
processors supporting no-execute protection. It enables no-execute
protection (also known as Data Execution Protection - DEP), which results in
the Memory Manager marking pages containing data as no-execute so that they
cannot be executed as code. This can be useful for preventing malicious code
from exploiting buffer overflow bugs with unexpected program input in order
to execute arbitrary code. No-execute protection is always enabled on 64-bit
versions of Windows on processors that support no-execute protection. There
are several options you can specify with this switch:
/NOEXECUTE=OPTIN Enables DEP for core system images and those specified in
the DEP configuration dialog.
/NOEXECUTE=OPTOUT Enables DEP for all images except those specified in the
DEP configuration dialog.
/NOEXECUTE=ALWAYSON Enables DEP on all images.
/NOEXECUTE=ALWAYSOFF Disables DEP.

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes