"Jeff Barnett" wrote

| I believe that if DEP is enabled you may opt out various programs but
| there is no way to turn it off except for programs opted in.

https://4sysops.com/archives/how-to-...revention-dep/

You can turn it completely off if you want to.
But why not just use OptOut and then make
exceptions for anything that could be an issue?
Just don't opt out your browser. That way you
get maximum protection without compatibility
hassles. You get better protection than Win7
is giving you by default. The only down side is
that you'll have to keep track of existing and
new software that might have problems.

The default for Win7 is as you said -- on for
system processes. I would think if you're going
to bother with it at all you should have protection
for your browser. They're giving you a setting
optimized for lack of hassle but not optimized
for security.

Just my opinion. I don't bother with it myself but
do make sure I don't make software that conflicts
with it. It's up to you, as long as you understand
the pros and cons.