Using minLogon to speed up booting and decrease footprint - Page 13

mattdisaster · 12-27-2004, 01:37 PM

I have set to show all hidden files, system and none but i still cant find it, where abouts should I be looking for it? and I'll try to registry in a few more min to see what the exact msg is. Thanks for trying to help me out, I was getting worried I'de be stuck.

-matt

FetLyd · 12-27-2004, 03:15 PM

it's c:\ntldr ..

mattdisaster · 12-28-2004, 01:47 AM

Well duh, guess who feels stupid, unchecked hide system files and it came right up, alright now when i try to edit the registry I still get the error:

PHP Code:


  
   
Cannot import: C:tempminlogin.reg: Error accessing the registry.

werd. any ideas? Thanks alot for all the help so far guys!

-matt

FetLyd · 12-28-2004, 04:32 AM

First, click on "start" > "Run".. Type " regedit " and press enter..
Then you need to enter the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet.. Rightclick on " Enum " (to the left), select " Permissions ", then select allow for "All permissions".. Click ok.. Import the reg. file, remove the selection on allow, close regedit..

Just remember to import ALL the .reg-files before you restart..

Good luck!

mattdisaster · 12-28-2004, 11:30 AM

Lol, thanks, finally got it "working". It seems whenever I do the actual replacement of the winlogon file and the regedit it wont stick. After a restart it goes back to normal windows. grrr. Thanks for all teh help though.

-matt

FetLyd · 12-28-2004, 11:36 AM

Maybe EWF is on? Start > Run > cmd > ewfmgr C:

where C: is the partition which you've protected with EWF..

The command to disable EWF is : " ewfmgr C: -commitanddisable -live "
type ewfmgr C: -enable again to have it enabled upon the next reboot..

FDV · 01-06-2005, 02:21 AM

There are a lot of ways to do this, but here's one that does NOT involve hacking DLLs, for simplicity's sake. I document this as part of my Internet Explorer removal process for Windows 2000 (http://www.vorck.com/remove-ie.html).
It also works for Windows 2000, 2003, and XP.

It is a rewritten SFCFILES.DLL... the original DLL has a list of protected files. This is just an empty list. So technically, WFP is not off, but it's turned on and checking an empty list, so Windows doesn't think anything ever needs replacing. The original author of the DLL is here:
http://www.d--b.webpark.pl/reverse04_en.htm

Originally, the DLL had some flaws in it, so a Russian programmer friend of mine re-coded it (though it's Damian's idea, the code is not on the site to examine, so if you want to examine some source: http://www.vorck.com/data/sfcfiles.zip - again, to be clear, this source works the same way, but it's my friend's code, not Damian's)

This DLL is used in nLite now: http://www.msfn.org/board/index.php?showtopic=30370&hl

Damian's now got a new version, but you have to install it, and the instructions are a bit tough to read. So find attached a replacement DLL that is just his DLL (it cannot be "installed" like on his page).
1. Download and unzip the file
2. Rename it SFCFILES.DLL.NEW (case does not, of course, matter)
3. Copy it into C:\WINNT\system32\dllcache
4. Also copy it into C:\WINNT\system32
5. Boot into Safe Mode
6. Type the following 6 lines at the C:\ prompt:
cd\winnt\system32\dllcache [return]
ren sfcfiles.dll sfcfiles.old [return]
ren sfcfiles.dll.new sfcfiles.dll [return]
cd\winnt\system32 [return]
ren sfcfiles.dll sfcfiles.old [return]
ren sfcfiles.dll.new sfcfiles.dll [return]
7. Reboot.

You're all set, WFP is asleep. Windows 2000 has a hotfix that replaces this file, so if you happen upon that fix, WFP will be on again. I don't have the number handy. Also, Windows 2003 SP1 will have a new version as well, so when you deploy SP1, you'll have to redo this process.

BTW, pardon my non-use of the URL tags, I just now noticed the little earth icon, I'm used to an "http" button in forums like these...

shiltz · 01-14-2005, 12:42 PM

I can't get the ACPI shotdown to work with minlogin so my power supply can't shut it down so I want to go back to the original winlogin, what I was wondering is if going back to the original winlogin is simply a matter of replacing the minlogin version with the old winlogin file or does that registy entry made need to be changed/removed first?

SFiorito · 01-14-2005, 12:46 PM

Did you use the new method of just adding the config value? If so, then you can switch between the two without a problem. If instead you deleted the winlogon entries (the old method) then you need to restore them before switching back.

shiltz · 01-14-2005, 01:00 PM

I used the method in the first page of this post, rename the orginal winlogin.exe to winlogin.exe.bak, then replace the new winlogin.exe it creates with the minlogin.exe that was renamed and made the registy entry, I still have the orginal winlogin.exe file as a .bak.

SFiorito · 01-14-2005, 01:21 PM

What changes did you make to the registry? Did you delete anything? If so then you need to restore it before moving back to the original winlogon. The new method just needs one registry value added (the config value) for minlogon which winlogon ignores so you can switch between the two without making registry changes.

shiltz · 01-14-2005, 01:31 PM

I just added this one, didn't change or delete anything else:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Config"=dword:00000017

i'm guessing that's the config one you mean then so I can just change back to winlogin with no issue then?

SFiorito · 01-14-2005, 02:39 PM

yeah

Bailey · 01-21-2005, 12:22 AM

Damn optimizing winxp is a headache. I'm on my 4th nLite build and this time I'm going with the "Lite" preset. Then I'm gonna try this minlogin/EWF. What exactly is EWF, whats it stand for?

SFiorito · 01-21-2005, 12:39 AM

Enhanced Write Filter. It's a component from XP Embedded to write protect volume (drives). It's mostly used for embedded devices running off flash drives which can't withstand continuous writing to the disk. You don't need ewf unless you'll be using a flash disk.

User Name		Remember Me?
Password