EWF incorrect function

[Petr Odlozil]

Hello,

I've prepared my build on the hard drive .. including the setting of
the EWF ..

then I resealed image and copied it to a Compact Flash card and I
rebooted the maschine from the CF.

First message of the booting image was that it can't open the user
profile and next it wanted to install the driver of a compact flash card
and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect
function.

What am I doing wrong ?

Thanks

Petr

 

[Petr Odlozil]

Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared,
including the choosed interface language - Czech, including the
selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr

 

[KM]

Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and CF is
on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that offline).

Hope you use EWF RAM Reg mode.

KM

 

[Petr Odlozil]

Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and CF is
on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that offline).

Hope you use EWF RAM Reg mode.

KM

Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including the
selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr

 

[KM]

Petr,

Was the system partition assigned C: letter when you did FBA on HDD?
What partition setup you got there on HDD and CF?

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.

Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

--
Regards,
KM, BSquare Corp.

Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and CF is
on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that offline).

Hope you use EWF RAM Reg mode.

KM

Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including the
selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr


Hello,

I've prepared my build on the hard drive .. including the setting of the EWF ..

then I resealed image and copied it to a Compact Flash card and I rebooted the maschine from the CF.

First message of the booting image was that it can't open the user profile and next it wanted to install the driver of a compact
flash card and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect function.

What am I doing wrong ?

Thanks

Petr

 

[Slobodan Brcin \(eMVP\)]

Petr,

Also what is your ARC path used by EWF? This should change if you changed OS partition.

Regards,
Slobodan

Petr,

Was the system partition assigned C: letter when you did FBA on HDD?
What partition setup you got there on HDD and CF?

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.

Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

--
Regards,
KM, BSquare Corp.

Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

CF

is

on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that offline).

Hope you use EWF RAM Reg mode.

KM


Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including the
selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr


Hello,

I've prepared my build on the hard drive .. including the setting of the EWF ..

then I resealed image and copied it to a Compact Flash card and I rebooted the maschine from the CF.

First message of the booting image was that it can't open the user profile and next it wanted to install the driver of a compact
flash card and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect function.

What am I doing wrong ?

Thanks

Petr

 

[Petr Odlozil]

Slobodan,

I have the same arcpath as was on the hard drive. I use the first
primary partition on the hard drive (hard drive was master) and also
first primary partition on the CF (the CF is master). That's right isn't
it ?

Petr

Petr,

Also what is your ARC path used by EWF? This should change if you changed OS partition.

Regards,
Slobodan

Petr,

Was the system partition assigned C: letter when you did FBA on HDD?
What partition setup you got there on HDD and CF?

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.

Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

--
Regards,
KM, BSquare Corp.

Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

KM wrote:

Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and

CF

is

on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that
offline).

Hope you use EWF RAM Reg mode.

KM



Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including
the

selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr



Hello,

I've prepared my build on the hard drive .. including the setting of the EWF ..

then I resealed image and copied it to a Compact Flash card and I rebooted the maschine from the CF.

First message of the booting image was that it can't open the user profile and next it wanted to install the driver of a
compact

flash card and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect function.

What am I doing wrong ?

Thanks

Petr

 

[Slobodan Brcin \(eMVP\)]

Petr,

That's right isn't it ?

Yes it is.

During the FBA CF should be disconnected. During the CF boot HDD should be disconcected.
If you do not satisfy both cases then you will have to remove all entries from registry MountedDevices to avoid mixed C: volume
letter problem.

Also please run ewfmgr C: while running on HDD and let us know what is written there. (You should see that EWF is operation in
Registry Configured mode)

Regards,
Slobodan

Slobodan,

I have the same arcpath as was on the hard drive. I use the first
primary partition on the hard drive (hard drive was master) and also
first primary partition on the CF (the CF is master). That's right isn't
it ?

Petr

Petr,

Also what is your ARC path used by EWF? This should change if you changed OS partition.

Regards,
Slobodan

Petr,

Was the system partition assigned C: letter when you did FBA on HDD?
What partition setup you got there on HDD and CF?

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.

Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

--
Regards,
KM, BSquare Corp.



Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

KM wrote:

Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and
CF

is

on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that

offline).

Hope you use EWF RAM Reg mode.

KM



Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including

the

selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr



Hello,

I've prepared my build on the hard drive .. including the setting of the EWF ..

then I resealed image and copied it to a Compact Flash card and I rebooted the maschine from the CF.

First message of the booting image was that it can't open the user profile and next it wanted to install the driver of a

compact

flash card and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect function.

What am I doing wrong ?

Thanks

Petr

 

[Petr Odlozil]

Yes before the reseal ewfmgr c: showed RAM(REG) and ENABLED

The problem maybe caused by that I run the FBA on HDD with CF installed
as a slave. I'm going to try your suggestions to run it on HDD without
CF installed. But my first intention was to put the image of XPE to CF
and let the program save record data to a harddrive. CF to be a master
and HDD as a slave.

How to prepare this kind of configuration ?

Petr

Petr,

That's right isn't it ?

Yes it is.

During the FBA CF should be disconnected. During the CF boot HDD should be disconcected.
If you do not satisfy both cases then you will have to remove all entries from registry MountedDevices to avoid mixed C: volume
letter problem.

Also please run ewfmgr C: while running on HDD and let us know what is written there. (You should see that EWF is operation in
Registry Configured mode)

Regards,
Slobodan

Slobodan,

I have the same arcpath as was on the hard drive. I use the first
primary partition on the hard drive (hard drive was master) and also
first primary partition on the CF (the CF is master). That's right isn't
it ?

Petr

Petr,

Also what is your ARC path used by EWF? This should change if you changed OS partition.

Regards,
Slobodan




Petr,

Was the system partition assigned C: letter when you did FBA on HDD?
What partition setup you got there on HDD and CF?

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.

Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

--
Regards,
KM, BSquare Corp.




Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

KM wrote:


Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and

CF


is


on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that

offline).


Hope you use EWF RAM Reg mode.

KM




Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including

the


selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr




Hello,

I've prepared my build on the hard drive .. including the setting of the EWF ..

then I resealed image and copied it to a Compact Flash card and I rebooted the maschine from the CF.

First message of the booting image was that it can't open the user profile and next it wanted to install the driver of a

compact


flash card and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect function.

What am I doing wrong ?

Thanks

Petr

 

[Petr Odlozil]

Hello KM,

Was the system partition assigned C: letter when you did FBA on HDD?

yes C: was the letter of HDD and after that of CF

What partition setup you got there on HDD and CF?

Both drives have only a single one primary partition

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.
Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

Before the reseal I have mounted all three connected devices
C: HDD
D: CF
E: CDROM

After the first boot after the reseal and copying the image to a CF
I have mounted only
C: CF

but strange thing is that in the first case all the volumes goes like
this "\\??\\Volume{9541f7c4-7e67-11d9-ac8e-d07b786eab9e}"=

and in the second (after the first boot)
it goes like this :
"\\??\\Volume{230e51c0-7f26-11d9-b5b5-806d6172696f}"=

Petr

 

[David D]

I gave up long ago with doing my FBA on a HD and then moving to CF card.
I now test on a HD, then when it works on a HD, I do my FBA on a fresh CF
card and then make that my master that I clone off of (after making a ghost
image of it).
Messing with the special partition the EWF creates is a headach.

 

[KM]

David,

I gave up long ago with doing my FBA on a HD and then moving to CF card.
I now test on a HD, then when it works on a HD, I do my FBA on a fresh CF
card and then make that my master that I clone off of (after making a ghost
image of it).
Messing with the special partition the EWF creates is a headach.

This is why EWF RAM Reg mode is so useful

 

[KM]

Petr,

You should be able to do that if you clean up the MountedDevices key.
Also be careful with the EWF ARC path to protected volume in registry. If should be the same as the one you have in boot.ini for
booting from the protected volume.

--
Regards,
KM, BSquare Corp.

Yes before the reseal ewfmgr c: showed RAM(REG) and ENABLED

The problem maybe caused by that I run the FBA on HDD with CF installed
as a slave. I'm going to try your suggestions to run it on HDD without
CF installed. But my first intention was to put the image of XPE to CF
and let the program save record data to a harddrive. CF to be a master
and HDD as a slave.

How to prepare this kind of configuration ?

Petr

Petr,

That's right isn't it ?

Yes it is.

During the FBA CF should be disconnected. During the CF boot HDD should be disconcected.
If you do not satisfy both cases then you will have to remove all entries from registry MountedDevices to avoid mixed C: volume
letter problem.

Also please run ewfmgr C: while running on HDD and let us know what is written there. (You should see that EWF is operation in
Registry Configured mode)

Regards,
Slobodan

Slobodan,

I have the same arcpath as was on the hard drive. I use the first
primary partition on the hard drive (hard drive was master) and also
first primary partition on the CF (the CF is master). That's right isn't
it ?

Petr

Petr,

Also what is your ARC path used by EWF? This should change if you changed OS partition.

Regards,
Slobodan




Petr,

Was the system partition assigned C: letter when you did FBA on HDD?
What partition setup you got there on HDD and CF?

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.

Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

--
Regards,
KM, BSquare Corp.




Thanks,

but I've tried it (with editting the registry offline in the resealed
image) and no improvements (

Yes I have EWF RAM Reg mode using EWF RAM Registry component, i've
switched the ewfmgr on (when it was running on the harddrive) before
doing the reseal.

HDD wasn't connected, but the CF is secondary master (the same as HDD
was before - the main board has primary channel for tha classical 40 pin
drives) and the secondary channel for 44pin IDE con and CF.

Petr

KM wrote:


Petr,

When you copied the postFBA image from HDD to CF and trying to boot from CF, make sure the HDD is not connected any more and

CF


is


on primary IDE master.

Delete the content of [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key just before you copy the image to CF (you can do that

offline).


Hope you use EWF RAM Reg mode.

KM




Hi,

here is another piece of information :

When I rebooted the maschine, all the user settings disappeared, including the choosed interface language - Czech, including

the


selection of items, which should be in the Start menu and so on.

After the first boot this was ok.

Petr




Hello,

I've prepared my build on the hard drive .. including the setting of the EWF ..

then I resealed image and copied it to a Compact Flash card and I rebooted the maschine from the CF.

First message of the booting image was that it can't open the user profile and next it wanted to install the driver of a

compact


flash card and CD drive. ( It should be already installed from the first try. )

When I run ewfmgr c: I got following message :

Failed getting protected volume configuration with error 1, incorrect function.

What am I doing wrong ?

Thanks

Petr

 

[KM]

Petr,

Thank you for a complete answers

Save the content of the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key before the reseal to a reg.file.
Do the same after you launch the image on CVF first time.
Then compare two reg.files to see the differences. Most likely you will see that the drive letters changed.

Before the reseal I have mounted all three connected devices
C: HDD
D: CF
E: CDROM

And you cleaned up the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key here, right?

After the first boot after the reseal and copying the image to a CF
I have mounted only
C: CF

but strange thing is that in the first case all the volumes goes like
this "\\??\\Volume{9541f7c4-7e67-11d9-ac8e-d07b786eab9e}"=

and in the second (after the first boot)
it goes like this :
"\\??\\Volume{230e51c0-7f26-11d9-b5b5-806d6172696f}"=

Well... Why this is bothering you? You changed the hardware (Disk ID is different on the CF vs the HDD) and therefore the volume
guid changed.

So, the arc path for booting from CF did not change, right?

Basically, you would need to do a clean boot on both devices (boot from HDD - no CF, boot from CF - no HDD).

Also, does the problem with EWF happen if you do not use fbreseal? (just copy post-FBA image to CF)

 

[Slobodan Brcin \(eMVP\)]

This is why EWF RAM Reg mode is so useful

Exactly

Regards,
Slobodan

 

[Slobodan Brcin \(eMVP\)]

Petr,

Before the reseal I have mounted all three connected devices

Please to not use reseal until we solve the first problem. (It can introduce problems on its own)

Regards,
Slobodan

 

[Petr Odlozil]

Hello KM,

And you cleaned up the [HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices] key here, right?
Yes

So, the arc path for booting from CF did not change, right?

No it is the same.

Basically, you would need to do a clean boot on both devices (boot from HDD - no CF, boot from CF - no HDD).

After I did this disappeared the message that system couldn't find the
user profile, but the EWF was again
in the incorrect function and after the next reboot I lost the user
settings with the Czech language.

Also, does the problem with EWF happen if you do not use fbreseal? (just copy post-FBA image to CF)

I will try.

 

[Petr Odlozil]

May be I found the sollution by again going through the new,

Can the problem be caused by the fixed/removable media attribute of the
compact flash card ?

Thanks

Petr

 

[KM]

Petr,

Well.. Having fixed media always helps under XP Pro/XPe.
Any chance for you to mark the card as fixed and try the deployment again?

 

[Petr Odlozil]

KM,
I've asked Sandisk for the utility and waiting.. )

P.