To expand upon what CEM said:

Like AV software, you can tell Ghost not to set DEP settings or ignore (Can't remember) So do you have a new admin or Ghost admin changing settings?