(Remote Installation Services)

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

SetupData

The [SetupData] section contains the OSLoadOptionsVar entry, used to modify the /NoExecute option in Boot.ini used by Data Execution Prevention (DEP).

Answer File Entries for the [SetupData] Section

Entry Description

OSLoadOptionsVar

Modifies the /NoExecute option in Boot.ini used by Data Execution Prevention (DEP).

OSLoadOptionsVar

Modifies the /NoExecute option in Boot.ini used by Data Execution Prevention (DEP).

Syntax
OSLoadOptionsVar = {"/noexecute=AlwaysOn" | "/noexecute=AlwaysOff" | "/noexecute=OptIn" | "/noexecute=OptOut"}
Value Description

"/noexecute=AlwaysOn"

Full DEP coverage for the entire system. All processes always run with DEP applied. The exceptions list for exempting specific applications from DEP protection is not available. If a corporate IT administrator uses the Application Compatibility Toolkit to opt out one or more applications from DEP protection, the applications still run with DEP. System Compatibility Fixes ("shims") for DEP do not take effect. OEMs may not use this option.

"/noexecute=AlwaysOff"

No DEP coverage for any part of the system, regardless of hardware DEP support. The processor does not run in PAE mode unless /PAE is present in the boot entry. OEMs may not use this option.

"/noexecute=OptIn"

On computers with processors capable of hardware-enforced DEP, DEP is enabled by default for limited system binaries and applications that "opt in." Only Windows system binaries are covered by DEP by default with this option. Corporate IT administrators may enable DEP protection for additional applications.

"/noexecute=OptOut"

DEP is enabled by default for all processes. Users can manually create a list of specific applications that do not have DEP applied using System Properties. A corporate IT administrator can use the Application Compatibility Toolkit to opt out one or more applications from DEP. System Compatibility Fixes ("shims") for DEP do take effect.

Example
[SetupData]
OSLoadOptionsVar = "/noexecute=OptOut"
Comments

The default value is "/noexecute=OptOut" for Windows Server 2003 with Service Pack 1 (SP1) family and later versions, and the default value is "/noexecute=OptIn" for Windows XP with Service Pack 2 (SP2) and later versions.