How to exclude GoldMine from the DEP (Data Execution Prevention list)?

Version 1

    Details

    How to exclude GoldMine from the DEP (Data Execution Prevention list)?

    This is occasionally necessary and should be considered for example
    - When using Terminal Services
    - When using Crystal Reports integration (from the Reports Center within GoldMine)
    - When recording and executing GoldMine Macros
    - While not typically but might be also considered for Microsoft Office and Outlook integration


    Resolution

    [VERIFICATION OF CURRENT DATA EXECUTION PREVENTION SETTINGS]

    - Further information which is provided by  GoldMine Technical Support only as-is and without any warranty of any  kind can be found on the below threads. Please keep in mind that any non  GoldMine or non Heat Software links are only provided as-is and content  and availability may change at any time without any notice

    https://support.microsoft.com/en-us/kb/875352
    http://windows.microsoft.com/en-us/windows-vista/data-execution-prevention-frequently-asked-questions
    http://windowsitpro.com/systems-management/q-how-do-i-use-bcdedit-set-data-execution-prevention-dep-mode

    1. Start a DOS command with elevated rights (run as administrator on CMD.EXE)
    2. Enter the command 'bcdedit.exe'
    3. Verify the value for the 'nx' parameter.



    - In order to be able to change the settings via the Windows User Interface the current DEP settings must be either set to

    a. OptIn - Enables DEP only for OS components, including the Windows kernel and Windows drivers.
    b. OptOut -  Enables DEP for the OS and all processes, including the Windows kernel and Windows drivers. However, administrators can disable DEP on selected executable files via the Control Panel > System applet.



    - When the DEP is set to AlwaysOn - DEP is always in place and administrators/users cannot perform changes from the user interface. 
    - When the DEP is set to AlwaysOff - DEP is turned off completely and administrators/users cannot perform changes from the user interface.



    - GoldMine and related applications can be ONLY added manually to an exception list when the nx parameter is set to OptIn or OptOut. Otherwise the system cannot be changed unless the nx parameter is changed by the /set parameter, if applicable this needs to be changed via the bcdedit.exe command

    1. Start a DOS command with elevated rights (run as administrator on CMD.EXE)
    2. Enter the specific command for changing the 'bcdedit.exe' with the following switches
    a. 'bcdedit.exe /set nx OptIn' (Enables DEP only for OS components, including the Windows kernel and Windows drivers.)
    Or
    b. 'bcdedit.exe /set nx OptOut' (Enables DEP for the OS and all processes, including  the Windows kernel and Windows drivers. However, administrators can  disable DEP on selected executable files via the Control Panel >  System applet.)
    Or
    c. 'bcdedit.exe /set nx AlwaysOn' (DEP is always in place and administrators/users cannot perform changes from the user interface.)
    Or
    d. 'bcdedit.exe /set nx AlwaysOff' (DEP is turned off completely and administrators/users cannot perform changes from the user interface.)
    3. Restart the machine so that the changes will be applied

    [STEPS TO ADJUST - When the options are set to OptIn or OptOut]

    1. Click Start > Control Panel
    2. Select System and Security > System
    3. Select Advanced System Settings
    4. Advanced Tab
    5. In section Performance > Select Settings
    6. Data Execution Prevention Tab
    Either
    7.a. Select Turn on DEP for essential Windows programs and services only in order to select the OptIn policy. Selecting this option means, DEP is turned off by turning it on ONLY for Windows system files, if the machine is configured to turn on DEP for essential Windows programs and services only, and the DEP error message continues to appear, a program may be installed that extends Windows functionality, for example 3rd party add-ons for Internet Explorer or Windows File Explorer. Such a program may be installed so that it causes a DEP problem in an important Windows program or service.



    Or

    7.b. Select Turn on DEP for all programs and services except those I select to select the OptOut policy.>> Selecting this option means that the Administrator can create an own exception list by adding applications to the list. Add Button for adding the applications that should be excluded by the DEP.



    8. OK
    9. Make sure to restart the machine
    10. Verify if further DEP errors are appearing with GoldMine or a related application