Consider the following scenario:
| • | You are using a computer that is running Microsoft Windows Server
2003 Beta for 64-bit Extended Systems. |
| • | You install Microsoft Windows XP with Service Pack 2 (SP2)
on the computer. |
| • |
The /noexecute=optin switch is in the boot loader section of the Boot.ini
file. |
However, Data Execution Prevention (DEP) does not apply to
programs and services that run on the computer. Additionally, the following
informational message appears on the
Data Execution Prevention
tab:
Your computer's processor does not support
hardware-based DEP. However, Windows can use DEP software to help prevent some
types of attacks.
This informational message appears even though the
computer has a processor that supports hardware-based DEP.
Back to the top
This issue occurs because installation of Windows XP with
SP2 does not replace the Boot Loader from Windows Server 2003 Beta for 64-bit
Extended Systems. The Boot Loader from Windows Server 2003 Beta for
64-bit Extended Systems does not automatically load the Physical Address
Extension (PAE) kernel if the
/noexecute=optin switch is in the boot loader section of the Boot.ini
file. The PAE kernel is required
for hardware-based DEP functionality.
Back to the top
To resolve this issue, follow these steps to add the
/PAE boot switch to the Boot.ini file for the Windows XP SP2
installation:
| 1. | Click Start, click Run,
type sysdm.cpl in the Open box, and then click OK.
|
| 2. | On the Advanced tab, click
Settings under Startup and Recovery.
|
| 3. | Under System Startup, click
Edit. |
| 4. | Find the boot entry for the Windows XP with SP2
installation. |
| 5. | Add the /PAE boot switch to the end of the boot entry for the Windows XP with SP2 installation.
For example, the content of the Boot.ini file is similar to the following content: [boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional” /fastdetect /noexecute=optin /PAE |
| 6. | Save the Boot.ini file. |
| 7. | Click OK two times. |
| 8. | Restart the computer. |
Back to the top
For more information about a related topic, click the following article number to view the article in the Microsoft Knowledge Base:
875352 (http://support.microsoft.com/kb/875352/)
A
detailed description of the Data Execution Prevention (DEP) feature in Windows
XP Service Pack 2, Windows XP Tablet PC Edition 2005, and Windows Server 2003
Back to the top
Help and Support
