Share via

Should I enable "Force randomization for images mandatory (ASLR)"?

Anonymous
2020-11-19T01:03:56+00:00

I just deployed a Lenovo M90n.  Windows self-installed with the "Force randomization for images mandatory (ASLR)" disabled.  That suggests someone smarter than me thought there was some problem with enabling the setting by default.  Can someone explain why that security setting should or should not be enabled?  On the surface, it sounds like risk-free good idea to enable it.  So I assume there's more involved.

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2020-11-19T01:27:10+00:00

    Hi and thanks for reaching out. My name is William, I’m an Independent Advisor. I'll be happy to help you out today.

    For the most part, ASLR may introduce instability or dysfunctionality for programs executables that do not explicitly participate in using this feature, especially portable programs (so-called self-contained exes). Latest MS documentation (https://docs.microsoft.com/en-us/windows/securi...) includes this warning as well:

    Warning

    Some security mitigation technologies may have compatibility issues with some applications. You should test exploit protection in all target use scenarios by using audit mode before deploying the configuration across a production environment or the rest of your network.

    For more details, this may help with some of the technical aspects: https://msrc-blog.microsoft.com/2017/11/21/clar...

    60+ people found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-11-19T01:41:00+00:00

    Thanks, WilliamDz.  I suppose I'll hold off enabling it.

    9 people found this answer helpful.
    0 comments