Some applications may have specific mitigations disabled in the Application Configuration policy in Enhanced Mitigation Experience Toolkit (EMET). These disabled mitigations may not take effect when one or both of the following EMET policies are also enabled:
-
Default Protections for Popular Software
-
Default Protections for Recommended Software
Symptoms
EMET policies are not cumulative. When Default Protections policies are applied in addition to the Application Configuration policy, duplicate entries for the same application may occur, and you cannot prioritize the Application Configuration settings. For example, because the Default Protections for Popular Software policy enables all mitigations for a set of applications, any of the same applications that are configured through the Application Configuration policy with mitigations disabled will not take effect.
Cause
To resolve this issue, do not enable the Default Protections policy settings. Instead, enable only the Application Configuration policy, and create individual entries for each application that has to have some or all mitigations enabled or disabled.
Resolution
"WindowsMediaPlayer"="*\\Windows Media Player\\wmplayer.exe -MandatoryASLR"
"Skype"="*\\Skype\\Phone\\Skype.exe -EAF"
"Lync"="*\\Microsoft Lync\\communicator.exe"
"LiveWriter"="*\\Windows Live\\Writer\\WindowsLiveWriter.exe"
"MOE"="*\\Windows Live\\Mesh\\MOE.exe"
"LiveSync"="*\\Windows Live\\Mesh\\WLSync.exe"
"WindowsLiveSync"="*\\Windows Live\\Sync\\WindowsLiveSync.exe"
"LiveMessenger"="*\\Windows Live\\Messenger\\msnmsgr.exe"
"Chrome"="*\\Google\\Chrome\\Application\\chrome.exe"
"GoogleTalk"="*\\Google\\Google Talk\\googletalk.exe"
"Firefox"="*\\Mozilla Firefox\\firefox.exe"
"FirefoxPluginContainer"="*\\Mozilla Firefox\\plugin-container.exe"
"Thunderbird"="*\\Mozilla Thunderbird\\thunderbird.exe"
"ThunderbirdPluginContainer"="*\\Mozilla Thunderbird\\plugin-container.exe"
"PhotoshopCS2"="*\\Adobe\\Adobe Photoshop CS2\\Photoshop.exe"
"PhotoshopCS264"="*\\Adobe\\Adobe Photoshop CS2 (64 Bit)\\Photoshop.exe"
"PhotoshopCS3"="*\\Adobe\\Adobe Photoshop CS3\\Photoshop.exe"
"PhotoshopCS364"="*\\Adobe\\Adobe Photoshop CS3 (64 Bit)\\Photoshop.exe"
"PhotoshopCS4"="*\\Adobe\\Adobe Photoshop CS4\\Photoshop.exe"
"PhotoshopCS464"="*\\Adobe\\Adobe Photoshop CS4 (64 Bit)\\Photoshop.exe"
"PhotoshopCS5"="*\\Adobe\\Adobe Photoshop CS5\\Photoshop.exe"
"PhotoshopCS564"="*\\Adobe\\Adobe Photoshop CS5 (64 Bit)\\Photoshop.exe"
"PhotoshopCS51"="*\\Adobe\\Adobe Photoshop CS5.1\\Photoshop.exe"
"PhotoshopCS5164"="*\\Adobe\\Adobe Photoshop CS5.1 (64 Bit)\\Photoshop.exe"
"Winamp"="*\\Winamp\\winamp.exe"
"Opera"="*\\Opera\\opera.exe"
"WinRARGUI"="*\\WinRAR\\winrar.exe"
"WinRARConsole"="*\\WinRAR\\rar.exe"
"UnRAR"="*\\WinRAR\\unrar.exe"
"Winzip"="*\\WinZip\\winzip32.exe"
"Winzip64"="*\\WinZip\\winzip64.exe"
"VLC"="*\\VideoLAN\\VLC\\vlc.exe"
"RealConverter"="*\\Real\\RealPlayer\\realconverter.exe"
"RealPlayer"="*\\Real\\RealPlayer\\realplay.exe"
"mIRC"="*\\mIRC\\mirc.exe"
"7z"="*\\7-Zip\\7z.exe"
"7zGUI"="*\\7-Zip\\7zG.exe"
"7zFM"="*\\7-Zip\\7zFM.exe"
"Safari"="*\\Safari\\Safari.exe"
"QuickTimePlayer"="*\\QuickTime\\QuickTimePlayer.exe"
"iTunes"="*\\iTunes\\iTunes.exe"
"Pidgin"="*\\Pidgin\\pidgin.exe"
"Java"="*\\Java\\jre6\\bin\\java.exe"
"Javaw"="*\\Java\\jre6\\bin\\javaw.exe"
"Javaws"="*\\Java\\jre6\\bin\\javaws.exe"
