Re: Way to Alter EWF RAM Config after boot?

David Harris wrote:
"Mark" <romanmj@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:uTE673C1FHA.1028@xxxxxxxxxxxxxxxxxxxxxxx

David Harris wrote:

I had a similar problem where an part of an image was to be deployed onto a CF card or a hard-drive. I found that the simplest solution was to configure EWF in TD so that it was disabled by default and setup an FBA RunOnce action to execute a script that configured the EWF registry settings the way I wanted. After running the image thru FBA I manually verified the settings and then enabled EWF.

David


"Brad Combs" <brad@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:eA43to%230FHA.904@xxxxxxxxxxxxxxxxxxxxxxx


Hi Mark,

I'm definitely not the EWF guru, you'll have to wait for Slobodan or KM to follow up, but.....

There are 4 main registry entries that I concern myself with while working with a registry based EWF RAM configuration. They are:

SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protected\Volume0\Type - Dword set to "1"
SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protected\Volume0\ArcName - String set to "multi(0)disk(0)rdisk(0)partition(1)" (or whatever the arc path is that you need)
SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protected\Volume0\Enabled - Dword set to "0" (Ensures startup is disabled)
SYSTEM\CurrentControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}\UpperFilters - Multi-String set to "EWF" to add EWF to the list of upper filter drivers

In your "all in one" configuration follow the steps to create a registry based EWF RAM configuration:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xpehelp/html/xegrfconfiguringewframregoverlays.asp

What I did was to create a component that includes the above registry data and added that to any builds that needed EWF RAM. I wrote a little utility that modifies the registry data (To enable or disable) and runs a -commitanddisable (if previously enabled) to commit the changes and then reboots. This can be done from an application, a script using reg.exe, or by hand via registry editor.

Hopefully that will get you started. Let us know if you have more questions.

HTH,
Brad



"Mark" <Mark@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:EA22DEFF-5BC3-404D-B0E3-4101541A75AA@xxxxxxxxxxxxxxxx


Hey Guys-

I'm trying to use a fairly universal image for several different devices. I
want to use EWF RAM based overlay.
The problem is that on one device the protected drive is actually disk 0,
the only device.  However on the second device the protected drive is
actually disk 2 since its a scsi array.

I've read a little about EWF Ram Reg, maybe this is a better option?

Is there a way to configure this easily post FBA?






All -

I have the registry items you speak of and EWF is started disabled.

Though, I am little confused right now.

My arcpath is set to..
"ArcName"="multi(0)disk(0)rdisk(0)partition(1)"

I thought that would be right since in my boot ini file it says multi(0)disk(0)rdisk(0)partition(1) for my C: drive which is the one I want to protect.

However, when I run ewfmgr it shows D: as my protected volume.

I was unsure what to change it to. Under the disk management service it labels my boot disk as disk 2 so I tried...
"ArcName"="multi(0)disk(2)rdisk(0)partition(1)" and that produced a STOP 7B BSOD.


I'm at a little bit of a loss.  I expect something like this..

-Disable ewf.  ewfmgr -disable
-Change some registry entries (Which ones?)
-reboot
-Enable ewf.  ewfmgr -disable
-Reboot


David... Is it possible for you to upload your script or at least the meat of it so I could see what I really need to do?

Any other help/guidance is appreciated.



From your reply it seems like you may have two partitions on the same disk, or two physical disk drives. What is the actual disk/partition layout you are using and where is the boot partition.

Are you copying the post-FBA image to a different drive (or partition layout) from that used to run it thru FBA. If you do that then the EWF settings may be invalid for the new layout.

Are you using the BIOS to change the boot drive (e.g. boot from disk 2 instead of disk 1). If you are doing that then the arc path in boot.ini may not match the setting you need to put into the EWF registry settings. Normally all you need to do is to make sure that the EWF setting is the same as that in the ARC-path settings in target designer.

How many entries does the HLKM\SYSTEM\CurrentControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}\UpperFilters Multi-String have in it. Normally there should be two settings in this string once EWF has been correctly configured at run-time. If EWF is the only entry then I have seen odd problems occur in some builds. If you are adding this registry entry in TD or a component then make sure that the 'Advanced Properties' for the entry indicate that the 'Write Options' setting is 'Always Edit The Value'.







David-

The problem lies in that there are two types of machines that have identical configuration with the exception that Machine A has 3 physical hard disks and Machine B has 2 physical hard disks.
So what we have is....

Machine A
Disk 0 (Unused 36gb SCSI Disk, E:)
Disk 1 (Backup Storage, 36GB SCSI Disk, D:)
Disk 2 (Solid State Media Disk, SCSI, Contains Boot partition, Image Resides Here, C:)

Machine B
Disk 0 (Backup Storage, 36GB SCSI Disk, D:)
Disk 1 (Solid State Media Disk, SCSI, Contains Boot partition, Image Resides Here, C:)

Ok so here's the problem, two identical machines, with the simple diff that there are 2 Physical disks in machine b and 3 in machine a.

The problem presents itself that I don't want to have to rebuild an image for a simple diff like that. So what I was wondering was....

Am I able to just set it static like on Disk 1, and make a script to alter it on Machine A, to change to disk 2?


I don't copy any post FBA image. I copy the runtime and run through FBA on each machine. I don't recapture any images.


I'm not using the BIOS or SCSI config utility to alter the drive letters or disk ordering.


Like I said, I just want to be able to alter which partition is protected, post FBA. I don't know which registry settings or commands I should be using to achieve this.


Thanks for your thorough response.

-Mark
.

Relevant Pages

  • Re: Power manager problem Hive
    ... storage devices use the activity event named in the base storage ... the registry settings under the storage profile. ... The above settings will cause the file system to create an event named ... >> will result in writes to the disk. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: IRQL_NOT_LESS_OR_EQUAL and EWF
    ... i don't recall anything on BSOD. ... not EWF required. ... the OS to write to disk: http://msdn.microsoft.com/library/en-us/xpehelp/html/xeconElToritoCDAsDisk.asp. ... created by TD to the sdi file. ...
    (microsoft.public.windowsxp.embedded)
  • Re: Stop 0x00000073 Error
    ... I guess I'll have to use RAM EWF instead. ... Since the corrupted registry changes are in the overlay on the disk they get ...
    (microsoft.public.windowsxp.embedded)
  • Re: IRQL_NOT_LESS_OR_EQUAL and EWF
    ... I forgot that we already discussed the EWF points. ... Ghost would work better around deploying disk data but nothing is perfect. ... created by TD to the sdi file. ... Or, better, did you try formatting the target partition and copying ...
    (microsoft.public.windowsxp.embedded)
  • Re: Way to Alter EWF RAM Config after boot?
    ... >> to execute a script that configured the EWF registry settings the way I ... > labels my boot disk as disk 2 so I tried... ...
    (microsoft.public.windowsxp.embedded)
Loading