Hi all,

In my company, we have not rolled out Windows XP SP2 to the general population yet, but are considering it.
One of the two roadblocks to doing this is the problems we experience with our applications and DEP (Data Execution Prevention) (the other roadblock is the built-in firewall that is enabled by default).

There is a way to turn off DEP system wide on a machine, but it requires modifying the critical file boot.ini.
Here is the Microsoft article:
Article on Disabling DEP
Has anyone experimented with this?
Has anyone already scripted something to add the AlwaysOff setting in the boot.ini?
With my limited scripting expertise, I am very wary of doing ANYTHING to the boot.ini through a logon script (or through any other method for that matter).

I almost put this in the "Discussions" category, but I am first and foremost a "Starter".

Thanks for any discussion/suggestions.
-jdogg