Spontanious EWF enable

  • Thread starter Thread starter Mark K Vallevand
  • Start date Start date
M

Mark K Vallevand

I have EWF configured for the first partition on my drive. Its marked to
not start enabled. When I examine the EWF partition after FBA completes, it
is sometimes enabled. Huh?

Any ideas about how a EWF partition can spontaniously enable?
 
Mark,

If you are using RAM EWF and configuration only trough registry without
temporary partition, then this can not happen.

If you are using standard RAM EWF then there is possibility, that at some
point you delete EWF temporary partition, and that after this EWF start
using configuration from registry, that could be set to enabled by default.

This is assumption, that is possible only if you are using RAM EWF.


Regards,
Slobodan
 
I am doing the first.

I have a HD with 2 partitions, C: with RAM EWF initially disabled, and D:
without EWF. No unpartitioned space on the HD. Everything is supposed to
run from the registry.

I'm actually seeing several failure modes, in addition to things working
correctly.

Sometimes, everything is OK.
Sometimes, ewfmgr cannot find a EWF-protected drive.
Sometimes, ewfmgr cannot find a EWF-protected drive, but after a few
reboots, the C: shows up with EWF enabled.
 
For more info you should read info I have provided on www.xpefiles.com.
There are few things you must do in TD so EWF partition is not created and
used.

You can always check initial state of EWF in registry.

Regards,
Slobodan
 
Thank you.

--
Regards.
Mark K Vallevand


Slobodan Brcin said:
For more info you should read info I have provided on www.xpefiles.com.
There are few things you must do in TD so EWF partition is not created and
used.

You can always check initial state of EWF in registry.

Regards,
Slobodan
 
Back
Top