EWFMGR

  • Thread starter Thread starter BeeFarmer
  • Start date Start date
B

BeeFarmer

I am having problems disabling EWF I have tried ewfmgr c:-disable several
different ways and then rebooting
but it keeps coming back saying that it is enable. Can someone please tell
me the correct way to disable ewf?

Many thanks
 
If you've set up EWF with no partition, then you have to
do -commitanddisable, so that any changes you've made (including the change
that tells it to disable the EWF) are written to the drive.
 
Thanks Heidi, I finally got it to disable.. Are there ways to create
protected areas with ewf
that doesn't require you to make a partition? I am trying to keep my event
logs from being lost
after a reboot. Any assistance appreciated.
 
You can have unprotected partition. You can't protect files, only whole
partitions can be protected by EWF.
Reroute log files to unprotected volume.

Regards,
Slobodan
 
You lost me a little there. How would you reroute log files to an
unprotected volume?
Is an unprotected volume the same as a partition? I get this feeling you
can protect an area
"Volume" on the same partition. Is that correct?
 
Sorry,

Let me try again, I should not have mentioned Volume.

If you are using primary partitions (most probably you do).
Then you can protect some partitions, and let other partitions be
unprotected.
How would you reroute log files to an unprotected volume?
Click to expand...
I don't need them. But you can probably find log path in registry.
Is an unprotected volume the same as a partition?
Click to expand...
They are not same, but never mind that.
I get this feeling you can protect an area
"Volume" on the same partition. Is that correct?
Click to expand...

Probably. But if you use primary partitions then this is not a case.
But nevertheless this won't help you with log files. They must not go to XPE
partition that is probably protected, and you must make sure that they don't
go there.


Regards,
Slobodan
 
Back
Top