Is there a way to configure DEP from the command line or in the registry?

Question

I'd like to exclude a single application's executable from DEP (Data Execution Prevention) on our automated Windows Server 2008 builds. Is there a way to do this either as a registry setting or from the command line?

Answer 1

Try editing the application path below and importing it:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"C:\\Program Files\\MyApp\\MyApp.exe"="DisableNXShowUI"

Edit: Just checked on a Server 2008 install I have and that is how the Nagios client is handling the DEP issue with their installer.

Answer 2

I think that what you need is the Application Compatibility Toolkit. With this you can create a shim that specifies that DEP should be disabled for your application.