locked
EMET 5.1 Causing Office & IE to Crash RRS feed

  • Question

  • We recently tried deploying EMET to quite a few workstations and have ran into a lot of problems. There has been a lot of issues if users trying to open Word, Excel, Powerpoint, or Internet Explorer and it instantly crash without an EMET message. When you look at the crash log, you see the "Faulting module path: C:\Windows\AppPatch\AppPatch64\EMET64.dll" for IE 10 and 11. When I completely disable all mitigation techniques for IE, it sometimes works and other times crashes with "Faulting module path: C:\Windows\SYSTEM32\ntdll.dll".

    I can't seem to pinpoint why some systems it's working, some it doesn't, and why the applications that crash are not the EMET pop up most of the time. I'm trying to disable various mitigation techniques but they seem to be hit or miss. The example above and one other Lync issue I ran into, the program didn't work until I disabled DEP and rebooted. Just opting in and turning it off didn't work.

    Any recommendations or ideas of what I can do to try to get a uniform config across the clients?

    Thanks!

    Monday, May 11, 2015 6:01 PM