What is the registry key for IE8 setting "Enable memory protection to help mitigate online attacks"?

sndip used Ask the Experts™
What is the registry key for IE8 setting "Enable memory protection to help mitigate online attacks"?  I would like set this for users using a batch file.  No GPO solutions, please.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2004

While I'm not sure about the registry settings, Microsoft says you can do it with the boot.ini as a system-level policy:


You can also use RegMon (http://live.sysinternals.com/regmon.exe) to monitor which registry entries are changed when you modify the DEP setting in the CP applet (System -> Performance -> DEP).  Chances are, though, since it appears as a boot-time setting, you'll probably need a reboot for it to engage properly.  That's just a guess.

Some further research indicates this key has something relevance here:


I have not seen an explicit explanation of the keys, but it sounds like it holds the in/exclude list for DEP.


Thanks for the comment but I was hoping for the reg key the reflects the setting in Internet Explorer-->Tools-->Internet Options-->Advanced-->Enable memory protection to help mitigate online attacks
Top Expert 2004

The information I read implied that is just an IE-specific setting for the same DEP UI found in the system applet.  It sounds like changing that setting in IE simply creates an opt-in entry for DEP.

Still, you can use RegMon to verify the registry keys used.  That should expose exactly what you are looking for.
I found the key:

HKLM \ Software \ Microsoft \ Internet Explorer \ Main \ DEPOff  set Reg_Dword = 1 or 0

1 = unchecked in IE advanced settings
0 = checked in IE advanced settings

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial