Why is Microsoft Data Execution Prevention blocking shared printing?

Posted on 2007-10-15
Last Modified: 2009-12-09
Hi all,

We have a user who has a WinXP SP2 box on a Win2k3 Domain. There is a Canon iCD880 connected to the PC, via usb. The printer was configured for sharing and 3 other PC's (All WinXP SP2, all domain members) were successfully printing.

Then the printer stopped printing and wouldn't fax. Unplugged it for 10 min(as per Canon instructions) and then it would fax but not print. I deleted the printers and removed the drivers, via Server Properties window, in CP > Printers and Faxes
Then I uninstalled the Canon software, rebooted. Then downloaded drivers from Canon and reinstalled the printer. After that, I deleted the printer and driver in CP>Printers and Faxes, on the other 3 PC's. Then I rebooted all PC's and, one at a time, reinstalled the print drivers on the 3 PC's.

At that point, the "print server" PC was able to print, though CP>Printers and faxes, reported it was offline. Right-clicking and selecting Online would not work. Also, the 3 PC's sharing this printer also reported the printer as being offline.

I repeated the procedure of uninstalling and reinstalling the printer on all 4 PC's and now the "print server" PC can print and reports the printer is online and I can access the properties. Same with the other 3 PC's. However, when trying to print from any of the 3 PC's which share this printer, there's a message from MS Data execution prevention, saying it was blocked.

I checked the DEP settings and it's set to "essential Windows programs and services only". There is no way to completely disable it.

I should also mention that the Active Directory security group "domain users" was granted permission for printing, in the sharing tab, in the printer properties, on the print server.

I'm not sure where to go from here.  Any suggestions would be appreciated
Question by:gs-rho
    LVL 26

    Expert Comment

    >> I checked the DEP settings and it's set to "essential Windows programs and services only". There is no way to completely disable it.

    Try following:

    "Disabling DEP system-wide using boot.ini"
    LVL 26

    Accepted Solution


    Author Comment

    Thanks. I'll check into those.

    Author Comment

    Worked great.
    DEP had to be disabled, using the boot.ini modification procedure, on each computer that was sharing the printer, not just the print server.
    LVL 26

    Expert Comment

    Thats great, Thanks for the points.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Learn about cloud computing and its benefits for small business owners.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now