Enable ASLR, DEP, and heap protection

Enable Windows Exploit Protection safeguards in Windows 10 or Windows 11.

Windows Exploit Protection helps block common memory-based attacks. This guide enables ASLR, DEP, and heap protection across Windows.

The Windows interface calls heap protection Validate heap integrity. It may also be called HOP.

These settings are requiered otherwise our services wont work as expected.

Enable the protections

These steps are the same in Windows 10 and Windows 11.

1

Open Exploit Protection

Select Start. Search for Exploit protection, then open Exploit protection settings.

You can also open Windows Security → App & browser control → Exploit protection.

2

Enable DEP

Under System settings, find Data Execution Prevention (DEP).

Select On by default, then select Apply.

3

Enable ASLR

Enable these settings, then select Apply after each change:

• Randomize memory allocations (Bottom-up ASLR)

• Force randomization for images (Mandatory ASLR)

4

Enable heap protection

Find Validate heap integrity. Select On by default, then select Apply.

This setting provides heap protection for supported applications.

5

Restart Windows

Restart your computer to make sure all applications use the new settings.

Verify the settings

Return to Windows Security → App & browser control → Exploit protection. Confirm each setting shows On by default.

If an application stops working

1. Open Exploit protection settings → Program settings.

2. Select the affected application, or use Add program to customize.

3. Restore the incompatible protection to its default value.

Do not turn off ASLR, DEP, or heap protection for all applications. Use a per-program exception only when needed.

If settings are unavailable

A work or school organization may manage Exploit Protection. Contact your administrator if the controls are locked or revert after changes.