Hi Lucvd,
MS does not store information in your MBR, or any hidden part of disk at
all.
Well, it stores _something_ on disk that ghost doesn't copy, and that
something is not in the EWF partition nor as a standard datafile in the
XPe partition.
I suspect it's in the same place where they keep the volume information on
dynamic disks. IMO this can only be in the unused data sectors after the
MBR on the first physical track, because even 'fdisk /mbr' from DOS won't
revert a disk from dynamic to basic - it will boot DOS again, but when
Win2k/XP sees it it still recognizes it as dynamic (and even knows how the
volumes were laid out before you replaced the MBR with an empty one).
Cloning a disk with EWF enabled, making a full byte-level image copy of
the EWF partition, results in a disk with a fully intact EWF partition,
but where XPe no longer knows there were any protected volumes. EWF can't
be reinitialized either (rundll iforgotwhat): it just keeps acting as if
there never were any protected volumes. When I tried that, it deleted the
EWF partition instead of starting to use it (which even makes sense:
without protected volumes you don't need an EWF partition).
Telling ghost to copy the full boot track instead of just the boot sector
doesn't work either: that again points in the direction of the MBR for the
configuration data.
If you use EWF by default it will create extra hidden partition that will
hold config and working parameters for EWF.
Data, but not the config information, or you'd be able to ghost EWF disks
by creating a byte-level copy of the EWF partition.
If you are using RAM EWF you can use my solution to configure EWF by using
registry only.
You've mentioned that several times already, but I never did it because I
mistrust RAM EWF for long uptimes.
Whith RAM EWF you assign memory to EWF, but I assume you're not going to
plug in a gigabyte of RAM just because EWF might ever need it.
What happens when it runs out of memory (be it after a day, a week, or
months of uptime)? If it crashes or spontaneously reboots, RAM EWF is out
of the question for me.