Exploit protection settings

Question

1. I do not understand the "System settings" options under EXPLOIT PROTECTION in Windows Defender set up section.

    What does "Use default (on) vs. "On by default mean?

    What is the safest?

2, What is SEHOP?

    What is "heap integrity"

    What is "High-entropy ASLR   ??????????????

I don't know what this is so I don't know how to set it up.

Answer 1

Just leave those settings alone, since the defaults are appropriate for all typical use situations.

Only someone with a deep knowledge of the operation of exploit protection, application development and the very terms you're asking to have explained should ever consider changing any of these.

In other words, if you have to ask, you shouldn't consider changing anything in this section.  It's provided for IT technical experts, developers or others with training that the typical consumer doesn't have.

Again, just leave them alone, you'll only regret it later if you don't.  We've seen that many times in these forums in the past when people come here with non-functioning apps or other situations where they've changed these settings without the background required.

Rob

Answer 2

Hi Bago. I'm Greg, an installation specialist, 10 year Windows MVP, and Volunteer Moderator here to help you.

Those settings are explained in these tutorials, and documentation from Microsoft:

https://www.howtogeek.com/329700/how-windows-de...

https://www.tenforums.com/tutorials/87845-chang...

https://docs.microsoft.com/en-us/windows/securi...

I hope this helps. Feel free to ask back any questions and keep me posted. If you will wait to choose if I resolved your problem, I will keep working with you until it's resolved.

________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.