Relocate EWF Partition

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

Hey guys,

I'm looking for a way to relocate the ewf partition on machines that
already have ewf ram setup. Currently they protect the wrong drive.
They are protecting D: when I want to protect C: If it's important D:
and C: are not the same physical disks. Also reimaging the machines
with a new build is almost certainly out of the question. Any solutions?

Thanks for any Help

-Mark
 
Try following scenario:
1. Disable EWF.
2. Edit EWF registry settings offline as you need.
3. Delete EWF partition offline. Use: etprep -delete.
4. Now when system started it should be in EWF RAM Reg and protecting volume
corresponding the settings from point 2.
5. If you need ewf partition and EWF RAM, run following command on device:
rundll32 ewfdll.dll ConfigureEwf
It should create EWF parition.

Regards,
Stas.
 
Stas-

Actually what I'm having a problem with is step 2. I'm not sure what
registry entries to be modifying, just the arcpath?

Thanks!

-Mark
 
Mark

Yes. In this situation because EWF already installed
only you need to modify it's ARC path.

Consider it like configuring EWF RAM Reg.

Stas
 
Back
Top