Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Disabled application mitigations in the EMET Application Configuration policy may not take effect when Default Protections policies are applied

Disabled application mitigations in the EMET Application Configuration policy may not take effect when Default Protections policies are applied

Symptoms

Some applications may have specific mitigations disabled in the Application Configuration policy in Enhanced Mitigation Experience Toolkit (EMET). These disabled mitigations may not take effect when one or both of the following EMET policies are also enabled:

  • Default Protections for Popular Software
  • Default Protections for Recommended Software

↑ Back to the top

Cause

EMET policies are not cumulative. When Default Protections policies are applied in addition to the Application Configuration policy, duplicate entries for the same application may occur, and you cannot prioritize the Application Configuration settings. For example, because the Default Protections for Popular Software policy enables all mitigations for a set of applications, any of the same applications that are configured through the Application Configuration policy with mitigations disabled will not take effect.

↑ Back to the top

Resolution

To resolve this issue, do not enable the Default Protections policy settings. Instead, enable only the Application Configuration policy, and create individual entries for each application that has to have some or all mitigations enabled or disabled.

↑ Back to the top

More Information

"WindowsMediaPlayer"="*\\Windows Media Player\\wmplayer.exe -MandatoryASLR"
"Skype"="*\\Skype\\Phone\\Skype.exe -EAF"
"Lync"="*\\Microsoft Lync\\communicator.exe"
"LiveWriter"="*\\Windows Live\\Writer\\WindowsLiveWriter.exe"
"MOE"="*\\Windows Live\\Mesh\\MOE.exe"
"LiveSync"="*\\Windows Live\\Mesh\\WLSync.exe"
"WindowsLiveSync"="*\\Windows Live\\Sync\\WindowsLiveSync.exe"
"LiveMessenger"="*\\Windows Live\\Messenger\\msnmsgr.exe"
"Chrome"="*\\Google\\Chrome\\Application\\chrome.exe"
"GoogleTalk"="*\\Google\\Google Talk\\googletalk.exe"
"Firefox"="*\\Mozilla Firefox\\firefox.exe"
"FirefoxPluginContainer"="*\\Mozilla Firefox\\plugin-container.exe"
"Thunderbird"="*\\Mozilla Thunderbird\\thunderbird.exe"
"ThunderbirdPluginContainer"="*\\Mozilla Thunderbird\\plugin-container.exe"
"PhotoshopCS2"="*\\Adobe\\Adobe Photoshop CS2\\Photoshop.exe"
"PhotoshopCS264"="*\\Adobe\\Adobe Photoshop CS2 (64 Bit)\\Photoshop.exe"
"PhotoshopCS3"="*\\Adobe\\Adobe Photoshop CS3\\Photoshop.exe"
"PhotoshopCS364"="*\\Adobe\\Adobe Photoshop CS3 (64 Bit)\\Photoshop.exe"
"PhotoshopCS4"="*\\Adobe\\Adobe Photoshop CS4\\Photoshop.exe"
"PhotoshopCS464"="*\\Adobe\\Adobe Photoshop CS4 (64 Bit)\\Photoshop.exe"
"PhotoshopCS5"="*\\Adobe\\Adobe Photoshop CS5\\Photoshop.exe"
"PhotoshopCS564"="*\\Adobe\\Adobe Photoshop CS5 (64 Bit)\\Photoshop.exe"
"PhotoshopCS51"="*\\Adobe\\Adobe Photoshop CS5.1\\Photoshop.exe"
"PhotoshopCS5164"="*\\Adobe\\Adobe Photoshop CS5.1 (64 Bit)\\Photoshop.exe"
"Winamp"="*\\Winamp\\winamp.exe"
"Opera"="*\\Opera\\opera.exe"
"WinRARGUI"="*\\WinRAR\\winrar.exe"
"WinRARConsole"="*\\WinRAR\\rar.exe"
"UnRAR"="*\\WinRAR\\unrar.exe"
"Winzip"="*\\WinZip\\winzip32.exe"
"Winzip64"="*\\WinZip\\winzip64.exe"
"VLC"="*\\VideoLAN\\VLC\\vlc.exe"
"RealConverter"="*\\Real\\RealPlayer\\realconverter.exe"
"RealPlayer"="*\\Real\\RealPlayer\\realplay.exe"
"mIRC"="*\\mIRC\\mirc.exe"
"7z"="*\\7-Zip\\7z.exe"
"7zGUI"="*\\7-Zip\\7zG.exe"
"7zFM"="*\\7-Zip\\7zFM.exe"
"Safari"="*\\Safari\\Safari.exe"
"QuickTimePlayer"="*\\QuickTime\\QuickTimePlayer.exe"
"iTunes"="*\\iTunes\\iTunes.exe"
"Pidgin"="*\\Pidgin\\pidgin.exe"
"Java"="*\\Java\\jre6\\bin\\java.exe"
"Javaw"="*\\Java\\jre6\\bin\\javaw.exe"
"Javaws"="*\\Java\\jre6\\bin\\javaws.exe"

↑ Back to the top

Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 2835387
Revision : 1
Created on : 1/8/2017
Published on : 8/14/2014
Exists online : False
Views : 77