X

Tightening Windows security with Microsoft's EMET utility

Microsoft's Enhanced Mitigation Experience Toolkit (EMET) is a simple but powerful configuration utility that allows you to harden applications that weren't originally designed to take advantage of Windows security features. Here's how it works.
By Ed Bott, Senior Contributing Editor
497858.jpg
1 of 8 Ed Bott/ZDNET

Microsoft's Enhanced Mitigation Experience Toolkit (EMET) is a simple but powerful configuration utility that allows you to harden applications that weren't originally designed to take advantage of Windows security features. Here's how it works.

For a full description, see the accompanying blog post, The one security tool every Windows user should know about.

497859.jpg
2 of 8 Ed Bott/ZDNET

The EMET interface is divided into two parts. The top shows the system status; the bottom shows a list of running processes and whether they are currently running with EMET enabled.

497860.jpg
3 of 8 Ed Bott/ZDNET

Although it sounds tempting, I don't recommend the Maximum Security Settings option for Windows 7. That's especially true in a business setting, where compatibility is crucial.

497861.jpg
4 of 8 Ed Bott/ZDNET

Your XP options are more limited, because XP doesn't support SEHOP or ASLR. Enabling DEP universally on XP is a smart idea.

497862.jpg
5 of 8 Ed Bott/ZDNET

Most zero-day threats attack commonly used Internet-facing applications, such as Internet Explorer add-ons, Adobe Acrobat and Reader, Apple QuickTime, and so on. EMET let you tighten security on these individual programs.

497863.jpg
6 of 8 Ed Bott/ZDNET

Because Address Space Layout Randomization (ASLR) is not supported on Windows XP, EMET offers five app-configuration options here, instead of the six you find with more modern Windows versions.

497864.jpg
7 of 8 Ed Bott/ZDNET

To view the security status of programs, open the main EMET UI and look in the Running Processes list.

497865.jpg
8 of 8 Ed Bott/ZDNET

In all Windows versions, you can click the Running EMET heading to sort the list so that all EMET-enabled apps are grouped together.

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes
Holiday lights in Central Park background

Related Galleries

Holiday wallpaper for your phone: Christmas, Hanukkah, New Year's, and winter scenes

21 Photos
Winter backgrounds for your next virtual meeting
Wooden lodge in pine forest with heavy snow reflection on Lake O'hara at Yoho national park

Related Galleries

Winter backgrounds for your next virtual meeting

21 Photos
Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes
3D Rendering Christmas interior

Related Galleries

Holiday backgrounds for Zoom: Christmas cheer, New Year's Eve, Hanukkah and winter scenes

21 Photos
Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza
img-8825

Related Galleries

Hyundai Ioniq 5 and Kia EV6: Electric vehicle extravaganza

26 Photos
A weekend with Google's Chrome OS Flex
img-9792-2

Related Galleries

A weekend with Google's Chrome OS Flex

22 Photos
Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup
shutterstock-1024665187.jpg

Related Galleries

Cybersecurity flaws, customer experiences, smartphone losses, and more: ZDNet's research roundup

8 Photos
Inside a fake $20 '16TB external M.2 SSD'
Full of promises!

Related Galleries

Inside a fake $20 '16TB external M.2 SSD'

8 Photos