In field pen testing, we find that DEP is not usually enable. So we feel that it is OK to leave the automatic target with DEP exploitation not enabled.