unable to find an ewf volume

[Guest]

I use ram overlay to protect my primory pariton
FBAlog file shows creating ewf volume is successful
But when I use the command "ewfmgr" ,it shows "unable to find an ewf volume"
I don't know what's wrong.

 

[Slobodan Brcin \(eMVP\)]

If you say that fba.log is ok, then.
Try ewfmgr c: just to see results.

Make sure that you have not used something like etprep.

Also if you want to use RAM EWF try my approach without EWF config
partition:

http://www.xpefiles.com/a_file.cfm?custid=Components&fileid=ramewf.zip&group
Name=Other

Regards,
Slobodan

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Have an opinion on the effectiveness of Microsoft Embedded newsgroups? Tell
Microsoft!
https://www.windowsembeddedeval.com/community/newsgroups
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

I use the command "ewfmgr c:"
But the result is" Failed getting protected volume configuration with error1"
what's the meaning of "error 1"

many thanks

 

[Guest]

This is my fbalog file
1:00:52 AM - ConfigureEwf() Start

1:00:52 AM - Getting EWF config parameters from registry

1:00:52 AM - EWF Partition Size = 0 (KBytes), Levels = 1, Volumes = 1

1:00:52 AM - Protected Volume Config #0

1:00:52 AM - Disk= 0,Part= 1,DiskType= IDE,Type= RAM

1:00:52 AM - Enable= Disabled, Optimize= 2, LazyWrite= N

1:00:52 AM - Found 2 Hard Disks

1:00:52 AM - Searching for El Torito disk

1:00:52 AM - Disk0 signature = 0x1FD31FD2

1:00:52 AM - Disk1 signature = 0xF986F986

1:00:52 AM - Checking Start value in System\CurrentControlSet\Services\redbook key

1:00:52 AM - Checking Start value in System\CurrentControlSet\Services\Imapi key

1:00:52 AM - Disk #0 layout info

1:00:52 AM - PRIMARY partition,start=0x0000000000007e00, len=0x0000000040390800, type= 11

1:00:52 AM - EXTENDED partition,start=0x0000000040398600, len=0x0000000465286e00, type= 15

1:00:52 AM - EXTENDED_FREE partition,start=0x0000000040398600, len=0x0000000465286e00, type= 0

1:00:52 AM - FREE partition,start=0x00000004a561f400, len=0x0000000002f10c00, type= 0

1:00:52 AM - Allocating EWF in LOGICAL partition, start=0x0000000040398600, len=0x000000000000fc00.

1:00:52 AM - Created EWF partition on Disk = 0, partition = 2,size = 0x0000000000007e00

1:00:52 AM - ewfOpen

1:00:52 AM - EWF Volume Config on Disk#0, Partition#2

1:00:52 AM - Segments = 0, Max Volumes = 1, Max Levels = 1

1:00:52 AM - ewfAdd.

1:00:52 AM - Protected Volume Config on Disk0\Partition1

1:00:52 AM - Type = RAM, State= DISABLED

1:00:52 AM - ewfClose

1:00:52 AM - Saving EWF configuration to registry

1:00:52 AM - Protected Volume ArcName = multi(0)disk(0)rdisk(0)partition(1)

1:00:52 AM - ConfigureEwf() End, status = 0x0

1:00:52 AM - [CallEntryPointThread] C:\WINDOWS\system32\ewfdll.dll, ConfigureEwf
1:00:52 AM - [FBASetProgressText] Resetting Setup Flag...
1:00:53 AM - [FBADoReboot] Sleeping...
1:01:03 AM - [FBADoReboot] Rebooting system...

 

[Slobodan Brcin \(eMVP\)]

I don't see any error in this.

What EWF QFE version are you using?

Regards,
Slobodan

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Have an opinion on the effectiveness of Microsoft Embedded newsgroups? Tell
Microsoft!
https://www.windowsembeddedeval.com/community/newsgroups
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This is my fbalog file :
1:00:52 AM - ConfigureEwf() Start.

1:00:52 AM - Getting EWF config parameters from registry.

1:00:52 AM - EWF Partition Size = 0 (KBytes), Levels = 1, Volumes = 1.

1:00:52 AM - Protected Volume Config #0 :

1:00:52 AM - Disk= 0,Part= 1,DiskType= IDE,Type= RAM.

1:00:52 AM - Enable= Disabled, Optimize= 2, LazyWrite= N.

1:00:52 AM - Found 2 Hard Disks.

1:00:52 AM - Searching for El Torito disk.

1:00:52 AM - Disk0 signature = 0x1FD31FD2.

1:00:52 AM - Disk1 signature = 0xF986F986.

1:00:52 AM - Checking Start value in

System\CurrentControlSet\Services\redbook key.

1:00:52 AM - Checking Start value in

System\CurrentControlSet\Services\Imapi key.

1:00:52 AM - Disk #0 layout info:

1:00:52 AM - PRIMARY partition,start=0x0000000000007e00,

len=0x0000000040390800, type= 11

1:00:52 AM - EXTENDED partition,start=0x0000000040398600,

len=0x0000000465286e00, type= 15

1:00:52 AM - EXTENDED_FREE partition,start=0x0000000040398600,

len=0x0000000465286e00, type= 0

1:00:52 AM - FREE partition,start=0x00000004a561f400,

len=0x0000000002f10c00, type= 0

1:00:52 AM - Allocating EWF in LOGICAL partition,

start=0x0000000040398600, len=0x000000000000fc00.

1:00:52 AM - Created EWF partition on Disk = 0, partition = 2,size = 0x0000000000007e00 .

1:00:52 AM - ewfOpen.

1:00:52 AM - EWF Volume Config on Disk#0, Partition#2:

1:00:52 AM - Segments = 0, Max Volumes = 1, Max Levels = 1

1:00:52 AM - ewfAdd.

1:00:52 AM - Protected Volume Config on Disk0\Partition1 :

1:00:52 AM - Type = RAM, State= DISABLED.

1:00:52 AM - ewfClose

1:00:52 AM - Saving EWF configuration to registry:

1:00:52 AM - Protected Volume ArcName = multi(0)disk(0)rdisk(0)partition(1).

1:00:52 AM - ConfigureEwf() End, status = 0x0.

1:00:52 AM - [CallEntryPointThread] C:\WINDOWS\system32\ewfdll.dll, ConfigureEwf
1:00:52 AM - [FBASetProgressText] Resetting Setup Flag...
1:00:53 AM - [FBADoReboot] Sleeping...
1:01:03 AM - [FBADoReboot] Rebooting system...

 

[KM]

ninihappy,

This might not be the reason of the failure but just in case check if your Configuration includes "PnP (User-mode)" component.

 

[Guest]

My configuration does not include the "PnP (user-mode)" component
Is the "PnP (user-mode)" necessary?

 

[Guest]

The version of ewf I use is 5.1.2600.1106

 

[Slobodan Brcin \(eMVP\)]

You should try to use PnP (user-mode) and see what is happening.

When you have problems you should always try adding some components until
you make your image work, and then you can remove things that are not
necessary.

Regards,
Slobodan

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Have an opinion on the effectiveness of Microsoft Embedded newsgroups? Tell
Microsoft!
https://www.windowsembeddedeval.com/community/newsgroups
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Thanks a lot!
After adding the component "PnP(user-mode)",that's ok.