Configure DEP to at least OptOut.
Note: Suspend BitLocker before making changes to the DEP configuration via BCDEDIT

BCEDIT Method:
- Open a command prompt (cmd.exe) or PowerShell with elevated privileges (Run as administrator).
- Enter "BCDEDIT /set nx OptOut".
- "AlwaysOn", a more restrictive selection, is also valid but does not allow applications that do not function properly to be opted out of DEP.

System Properties Method:

• Open "System" in Control Panel.
• Select "Advanced system settings".
• Click "Settings" in the "Performance" section.
• Select the "Data Execution Prevention" tab.
• Applications that are opted out are configured in the window below the selection "Turn on DEP for all programs and services except those I select:".

STIG
Desktop
W11: https://stigviewer.com/stigs/microsoft_windows_11/2024-09-12/finding/V-253283
W10: https://stigviewer.com/stigs/microsoft_windows_10/2024-11-25/finding/V-220726

NIST 800-53: CM-7(2)
CSCv6: 8.4
NIST 800-171 Rev2: 3.4.7
NIST 800-171 Rev3 FPD: 3.4.8.b
NIST 800-171 Rev3: 03.04.08.b
CMMC v2.0 L2: CM.L2-3.4.7
CMMC V2.1 L2: CM.L2-3.4.7