Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
The Enhanced Mitigation Experience Toolkit
Article ID: 2458544 - View products that this article applies to.
Support for Windows Vista Service Pack 1 (SP1) ends on July 12, 2011. To continue receiving security updates for Windows, make sure you're running Windows Vista with Service Pack 2 (SP2). For more information, refer to this Microsoft web page: Support is ending for some versions of Windows
This article describes the Enhanced Mitigation Experience Toolkit. A link is provided to download the toolkit.
What is the Enhanced Mitigation Experience Toolkit?The Enhanced Mitigation Experience Toolkit (EMET) is a utility that helps prevent vulnerabilities in software from being successfully exploited. EMET achieves this by using security mitigation technologies. These technologies function as special protections and obstacles that an exploit author must defeat to exploit software vulnerabilities. These security mitigation technologies do not guarantee that vulnerabilities cannot be exploited. However, they work to make exploitation as difficult to perform as possible. In many instances, a fully-functional exploit that can bypass EMET may never be developed.
Are there restrictions as to which software EMET can protect?EMET is designed to work with any software, regardless of when it was written or by whom it was written. This includes software that is developed by Microsoft and software that is developed by other vendors. However, you should be aware that some software may be incompatible with EMET. For more information about this, please see the "Are there any risks to using EMET?" section.
What are the requirements for using EMET?On Windows XP and Windows Server 2003 operating systems, the Microsoft .NET Framework 2.0 must be installed for EMET to work. There are no other special requirements for any other supported version of Windows.
Where can I download EMET?To download EMET, visit the following Microsoft website:
How do I use EMET to protect my software?After you install EMET, you must configure EMET to provide protection for a piece of software. This requires you to provide the name and location of the executable file that you want to protect. To do this, use one of the following methods:
How can I deploy EMET across the enterprise?With the current version, the easiest way to deploy across an enterprise is by using enterprise deployment and configuration technologies. The current version has built-in support for Group Policy and System Center Configuration Manager. For more information on how EMET supports these technologies, please refer to the Section 3 of EMET Users Guide that comes with your EMET installation.
You can also deploy EMET by using the command prompt utility. To do this, follow these steps:
Are there any risks to using EMET?The security mitigation technologies that EMET uses carry an application compatibility risk with them. Some applications rely on exactly the behavior that the mitigations block. It is important to thoroughly test EMET on all target computers by using test scenarios before you deploy EMET in a production environment. If you encounter a problem with a specific mitigation, you can individually enable and disable the specific mitigations. For more information, refer to the user's guide that is installed with EMET.
What is the latest version of EMET?A new version of EMET was made available on May 15, 2012. For more information about the latest version of EMET, visit the following Microsoft TechNet blog site:
How can I get support for EMET?Customers using EMET 3.0 with access to Microsoft Services Premier and Professional Support can receive fee-based advisory support through these channels. Customers who do not have Premier or Professional contracts, or customers using EMET 2.1 can receive support through the official support forum:
Article ID: 2458544 - Last Review: February 12, 2013 - Revision: 6.0