DEP exception settings- disappeared - where are they held? RRS feed

  • Question

  • Hi, I suddenly found my DEP exceptions had been cleared - about 10 or 12 I think. I'd like to know where these are held so I can back them up/restore them.

    (I didn't want to use System Restore 'cos I didn't know when they had been lost, and the wider implications of System Restore).

    I've tried a number of experiments to locate these, e.g. comparing registry snapshots before and afterwards, monitoring C:\ for changes, using Process Monitor. I think I know which process runs to change an exception, but haven't managed to work out what it does.

    Ideas welcome.. thanks!

    Sunday, August 19, 2012 7:36 AM

All replies

  • Hi, I can finally answer my own question:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers

    appears to be where the list is recorded.

    Using Process Monitor with careful filtering, after several attempts, a list of exactly the exe's recorded as exceptions appears.

    D A Lawrie

    Sunday, August 19, 2012 5:26 PM