Disabled application mitigations in the EMET Application Configuration policy may not take effect when Default Protections policies are applied

Article ID: 2835387 - View products that this article applies to.
Expand all | Collapse all

Symptoms

Some applications may have specific mitigations disabled in the Application Configuration policy in Enhanced Mitigation Experience Toolkit (EMET). These disabled mitigations may not take effect when one or both of the following EMET policies are also enabled:

  • Default Protections for Popular Software
  • Default Protections for Recommended Software

Cause

EMET policies are not cumulative. When Default Protections policies are applied in addition to the Application Configuration policy, duplicate entries for the same application may occur, and you cannot prioritize the Application Configuration settings. For example, because the Default Protections for Popular Software policy enables all mitigations for a set of applications, any of the same applications that are configured through the Application Configuration policy with mitigations disabled will not take effect.

Resolution

To resolve this issue, do not enable the Default Protections policy settings. Instead, enable only the Application Configuration policy, and create individual entries for each application that has to have some or all mitigations enabled or disabled.
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2835387 - Last Review: August 14, 2014 - Revision: 4.0
Applies to
  • Enhanced Mitigation Experience Toolkit 3.0
  • Enhanced Mitigation Experience Toolkit 4.0
  • Enhanced Mitigation Experience Toolkit 4.1
  • Enhanced Mitigation Experience Toolkit 5.0
Keywords: 
KB2835387

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com