I believe you need the Execute Disable bit enabled... PXE should be off, as this is for booting from a network card.