You need to prevent all of the applications that run on Server1 from running code from non- executable memory regions