Disabling Hardware‐enforced Stack Protection to run protected executables through USVFS

About Hardware-enforced Stack Protection

Hardware-enforced Stack Protection is a security feature in Windows that may prevent executables from being ran through USVFS. It requires hardware that supports Intel Control-flow Enforcement Technology or AMD Shadow Stacks to work. Users with incompatible hardware will not experience any problems launching protected executables through Mod Organizer.

How to disable Hardware-enforced Stack Protection for an executable

As a developer

Compile the program using the /CETCOMPAT:NO compiler flag or add the <CETCompat>false</CETCompat> property to the project file of your .NET application (defaults to true since .NET 9).

As a user

1. Open the Windows Security app.
2. Navigate to App & browser control > Exploit protection settings > Program settings.

3. Click the plus button labeled "Add program to customize".

4. Click Choose exact file path and select the executable in the file picker.
5. Scroll down to Hardware-enforced Stack Protection, check the Override system settings checkbox and ensure the toggle is set to Off.

6. Click Apply.