With R13 (release notes here: http://www.symantec.com/business/support/index?page=content&id=DOC2031 having a known issue with the Altiris Agent service not being able to start due to how DEP may be configured on a system, we have held off on moving to that rollup until it is resolved. In our server-based environment we aren't able to make the suggested work-around changes to DEP and reboot the systems without impacting our clients, especially with over 10,000 Windows servers across multiple data centers.
As part of the decision process to go to R13 or not, I was to evaluate the impact of this issue by building a custom inventory to see what the DEP settings were on each server. This information is not part of any out of the box inventory in 6.x.
I was able to find the information in the WMI table Win32_OperatingSystem. Attached is the xml that I built using aexinvbuilder and have placed it in C:\Program Files\Altiris\Notification Server\NSCap\Bin\Win32\X86\Inventory Solution on my Notification Server.
http://www.symantec.com/business/support/index?page=content&id=TECH122261 has more information including the following about the values and what they represent:
DEP is turned off for all 32-bit applications on the computer with no exceptions. This setting is not available for the user interface.
DEP is enabled for all 32-bit applications on the computer. This setting is not available for the user interface.
DEP is enabled for a limited number of binaries, the kernel, and all Windows-based services. However, it is off by default for all 32-bit applications. A user or administrator must explicitly choose either the AlwaysOn or the OptOut setting before DEP can be applied to 32-bit applications.
DEP is enabled by default for all 32-bit applications. A user or administrator can explicitly remove support for a 32-bit application by adding the application to an exceptions list.
Thank you.