Dear SAS members, dear guests,
Lately, several users independently reported startup issues with their IL-2 game instances, and
all of them could eventually be nailed down to DEP (Data Execution Prevention) being enabled for all processes accidentally.
Without trying to understand what makes people tinker with important system settings like this, without even knowing what they do and what the side effects will be, let me try to show you how to get out of it again.
What Is Data Execution Prevention in Windows 10/11?Data Execution Prevention or DEP is a Windows built-in feature that offers an extra layer of security for your Windows computer. It can help prevent your computer from virus attacks or other security threats.
In detail, DEP utilizes a set of hardware and software technologies to conduct additional checks on Windows computer memory to prevent malicious code from loading on a system and monitor your computer programs to use system memory safely.
In other words, there are some memory areas in Windows computers that don’t allow codes to run. If some codes are running there, they might be malicious.
Therefore, if Data Execution Prevention finds some programs are using computer RAM in a suspicious way, it will shut them down to protect the safety of your computer system.
What Programs Might Conflict with DEP Windows 10/11?Programs built with old codebases, old 32-bit programs or games, old device drivers, etc. are likely to conflict with DEP Windows 10/11.
If some programs on your Windows 10/11 computer can’t work well or shut down with no notice. How do you know if it is caused by DEP?
You can click Start, type event viewer, and click Event Viewer app to open Windows Event Viewer on Windows 10/11. Scroll down the log list to check if there is an Event ID 1000 DEP error. If you find one, then a program may have problems with DEP.
As luck has it, IL-2 is one of those applications that contain executable code in "suspicious" areas in RAM, hence you must not enforce DEP on IL-2 processes.
Here is how to Disable/Enable Data Execution Prevention (DEP) in Windows 11 or 10Go to the desktop and make a right-click on This PC icon. From the context menu, select Properties.
From the Settings app that opens up, click Advanced system settings.
On the System Properties dialog, switch to the Advanced tab. Moving further, hit the Settings button underneath the Performance section.
This will open Performance Options dialog on the PC screen. Shift to the Data Execution Prevention tab. Here, you will see two options namely:
“Turn on DEP for essential Windows programs and services only“: This is the default setting. Use this. It will provide protection against threats and viruses for certain services and applications of Windows only.
If you chose this, then you can skip anything below this line - you're fine now.
“Turn on DEP for all programs and services except those I select“: It is the second option. Not just Windows processes only, this option will also enable the feature for all processes.
If you chose this option, you will need to add
all il2fb.exe instances on your PC to the DEP exclusion list using the "Add" button for each of them:
Here is how to Disable/Enable Data Execution Prevention (DEP) in Windows 11 or 10 using command line interfaceIf you dislike walking through the ever-changing graphical interfaces of Windows (like me), alternatively you can use the command prompt.
Open Run dialog box by hitting “Win + R” hotkeys altogether. Here, type cmd and hit Ctrl + Shift + Enter.
When UAC prompts up, hit Yes to proceed ahead.
Now, on the Command Prompt window, type or copy/paste this given below command and then hit Enter.
bcdedit.exe /set {current} nx OptIn
Your prompt should reply with "The operation completed successfully."
Reboot your PC to apply the command line setting.
Mike