Unable to Get EWF Protected Volume Error

  • Thread starter Thread starter Tim Houle
  • Start date Start date
You need some free space. I've found that as I have two
partitions, if one is a logical in an extended, the EWF
only works if the space is left in the extended partition.
 
You can have extended or unallocated space, but the space
must be at least 8MB so the EWF volume (partition) can be
created. Even if the overlay is RAM and the EWF Volume
ends-up 32K in size.

Regards,

Sean Liming
www.a7eng.com
Author: Windows NT Embedded Step-By-Step and XP Embedded
Advanced.
 
You can follow guide lines that Heidi and Sean gave you or you can try
following.

Also on www.xpefiles.com I have posted component and doc that will save you
from making next few steps.





In next few steps it will be explained how to configure RAM EWF by using
only TD so that FBA don't create temporary partition.

Following info can be applied to any storage that is supported by EWF
driver.





Key steps:

1. Locate component Enhanced Write Filter - Hotfix Q823025

2. Under Resources disable FBA DLL/COM Registration.

3. Add to registry using TD or custom component.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EWF\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EWF\Parameters\Protect
ed]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EWF\Parameters\Protect
ed\Volume0]

"VolumeID"="{1EA414D1-6760-4625-8CBE-4F9F85A48E15}"

"ArcName"="multi(0)disk(0)rdisk(0)partition(1)"

"Enabled"=dword:00000000

"Type"=dword:00000001



Optional step:

4. Under Files disable ewfdll.dll and ewfinit.dll.



Configuration:

ArcName should point to disk and partition that will be protected.

Enabled is default state of EWF and in most cases should be 0 (disabled)





Troubleshooting:

Failing to provide Enabled value in registry will result as EWF being
enabled by default.

If FBA need to restart device more than once this will lead to infinite
reboots.





Normal behaviour:

ewfmgr should always show: "Unable to find an Ewf Volume"

ewfmgr D: if D is not protected partition will show: "Failed getting
protected volume configuration with error 1."

ewfmgr C: -disable will not work.





Usage:

ewfmgr C: -enable will enable protection

ewfmgr C: -commitanddisable will disable protection and commit changes
during shutdown.

ewfmgr C: -commit will commit changes during shutdown.



Conclusion:



This procedure obsolete all problems and questions related to EWF temporary
partition.

There is no need for extra space on disk.

No need to delete EWF partition since it is not created.

Using optional step 4 you will gain extra 28KB of free space.





Further Reading:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnxpesp1/ht
ml/xpesp1_cf_ewf.asp

Procedure that I have explained here is heavily based on this article.



Key difference is in usage of Enabled key that allow us to set EWF default
state to disabled, so we can populate registry from TD and not from regedit
as sugested by this article.







Best regards,

Slobodan
 
Thank you Linda, Sean and Slobodan. You've been a big
help.

-----Original Message-----
You can follow guide lines that Heidi and Sean gave you or you can try
following.

Also on www.xpefiles.com I have posted component and doc that will save you
from making next few steps.





In next few steps it will be explained how to configure RAM EWF by using
only TD so that FBA don't create temporary partition.

Following info can be applied to any storage that is supported by EWF
driver.





Key steps:

1. Locate component Enhanced Write Filter - Hotfix Q823025

2. Under Resources disable FBA DLL/COM Registration.

3. Add to registry using TD or custom component.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EWF\
Parameters][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EWF\
Parameters\Protect
ed]
Click to expand...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EWF\
Parameters\Protect
ed\Volume0]

"VolumeID"="{1EA414D1-6760-4625-8CBE-4F9F85A48E15}"

"ArcName"="multi(0)disk(0)rdisk(0)partition(1)"

"Enabled"=dword:00000000

"Type"=dword:00000001



Optional step:

4. Under Files disable ewfdll.dll and ewfinit.dll.



Configuration:

ArcName should point to disk and partition that will be protected.

Enabled is default state of EWF and in most cases should be 0 (disabled)





Troubleshooting:

Failing to provide Enabled value in registry will result as EWF being
enabled by default.

If FBA need to restart device more than once this will lead to infinite
reboots.





Normal behaviour:

ewfmgr should always show: "Unable to find an Ewf Volume"

ewfmgr D: if D is not protected partition will show: "Failed getting
protected volume configuration with error 1."

ewfmgr C: -disable will not work.





Usage:

ewfmgr C: -enable will enable protection

ewfmgr C: -commitanddisable will disable protection and commit changes
during shutdown.

ewfmgr C: -commit will commit changes during shutdown.



Conclusion:



This procedure obsolete all problems and questions related to EWF temporary
partition.

There is no need for extra space on disk.

No need to delete EWF partition since it is not created.

Using optional step 4 you will gain extra 28KB of free space.





Further Reading:

http://msdn.microsoft.com/library/default.asp? url=/library/en-us/dnxpesp1/ht
ml/xpesp1_cf_ewf.asp

Procedure that I have explained here is heavily based on this article.



Key difference is in usage of Enabled key that allow us to set EWF default
state to disabled, so we can populate registry from TD and not from regedit
as sugested by this article.







Best regards,

Slobodan



Tim Houle said:
1 Primary 2GB Active Partition. Do I need an extended?
Click to expand...


.
Click to expand...
 
Works fine on mine in under 3MB, for a 256MB CF card. Is the amount of
free space related to the size of the drive?
 
Well, the idea is that 8MB is the smallest partition that XP can create. I
have tried a smaller unpartitioned space before, and it didn't work. From
what others tell me going below 8MB is hit and miss.


Regards,

Sean Liming
www.a7eng.com
Author: Windows NT Embedded Step-By-Step and XP Embedded Advanced.
 
Back
Top