Microsoft Management Console (MMC) Snap-ins Data Execution Prevention

AdminStudio 2022 | 23.0 | Application Manager

For this operating system compatibility test, the Windows Installer database is scanned for the presence of Microsoft Management Console snap-in (.msc) files that are not Data Execution Prevention-aware (DEP-aware).

Test Group/Test Category

0309—Operating System Compatibility/Windows 8.1 (32-Bit)
0409—Operating System Compatibility/Windows 8.1 (64-Bit)
2809—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (32-Bit)
5209—Operating System Compatibility/Windows 10-1909 (32-Bit)
5409—Operating System Compatibility/Windows 10-2004 (32-Bit)
5609—Operating System Compatibility/Windows 10-20H2 (32-Bit)
5809—Operating System Compatibility/Windows 10-21H1 (32-Bit)
7009—Operating System Compatibility/Windows 10-21H2 (32-Bit)
2909—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (64-Bit)
5309—Operating System Compatibility/Windows 10-1909 (64-Bit)
5509—Operating System Compatibility/Windows 10-2004 (64-Bit)
5709—Operating System Compatibility/Windows 10-20H2 (64-Bit)
5909—Operating System Compatibility/Windows 10-21H1 (64-Bit)
7109—Operating System Compatibility/Windows 10-21H2 (64-Bit)
6709—Operating System Compatibility/Windows 11-21H2 (64-Bit)
0509—Operating System Compatibility/Windows Server 2012
0609—Operating System Compatibility/Windows Server 2016
1009—Operating System Compatibility/Windows Server 2019

Severity

Error

Message

This Windows Installer database contains Microsoft Management Console snap-in [FILE_NAME2] referencing a non DEP-aware library [FILE_NAME2] (Table: File, Keys: [FILE_KEY1], [FILE_KEY2]).

Background

On Windows XP SP2 and later systems, the DEP security feature prevents an application or a service from executing code from a non-executable memory region. Microsoft Management Console (MMC) is a common presentation service for management applications, hosting snap-ins provided by Microsoft and third-party software manufacturers. MMC.exe always runs with DEP enabled: the feature cannot be turned off, and no compatibility mode exists. Snap-ins that are not DEP-aware might fail to load within the MMC or might not work properly.

Resolution

The following resolutions are available.

Manual Fix

An application compatible with the specified Windows operating system should be delivered by its manufacturer. Self-developed applications should be re-engineered so that all Microsoft Management Console snap-ins (.msc) are DEP-aware.

Basic Auto Fix

No resolution is available.

Advanced Auto Fix

Microsoft Management Console snap-ins (.msc) that are not DEP-aware are removed in a Windows Installer transform.

This fix is enabled by default.

Caution:Caution: Removed snap-ins might cause (part of) the application to not function or to function incorrectly.

See Also