New EWF + MinLogon and CF instructions

SFiorito · 12-17-2004, 07:33 AM

Okay, I tried to make it as simple as possible in the time I had. I'm pretty sure I covered everything in this doc.

http://granturing.blogspot.com/

**EDIT** New Link

mpattonm · 12-17-2004, 07:39 AM

Is this link working for somebody?

smenard · 12-17-2004, 07:41 AM

it works put you have to be a member of msnuser

SFiorito · 12-17-2004, 07:48 AM

sorry guys I thought it would've let anyone in. Usually does with pictures at least...Put a new link up there.

SlashEMc2k · 12-17-2004, 10:35 AM

With Windows XPE Web Install do you download all the products?

Or just the Windows XP Embedded SP2 257mb?

SFiorito · 12-17-2004, 10:46 AM

You need the tools (for bootprep) and data files for the Repositories so unfortunately thay may mean all the products.

SlashEMc2k · 12-18-2004, 11:08 AM

Tip..
XP SP2 Disabling System File Protection:

To replace the winlogon.exe upload minlogon.exe to C:\WINDOWS\system32\dllcache,
rename and minlogon.exe to winlogon.exe.

Rename C:\WINDOWS\system32\winlogon.exe to winlogon.exe.bak
Copy the new 15-17kb Winlogon.exe from dllcache to system32 directory.

if windows file protection pops up hit cancel.
The old Winlogon file will not overwrite your new winlogon and you will still have windows file protection enabled

SFiorito · 12-18-2004, 11:25 AM

Actually, I think I know now why it never overwrote my file... I ran "sfc /purgecache" and "sfc /cachesize=0" after I did an nLite install. Of course, with the new nLite you can completely disable SFC.

SlashEMc2k · 12-18-2004, 11:52 AM

ok up to 9. Reboot system.

When I reboot it just restarts gets to the windows xp loading animation and restarts from boot.

I can get to XP if I load up last good known configuration.
I have checked the registry and it matches the ewf.reg file.

All I can think is the ArcName might be different on my system.
Would this be causing it to reboot and not load into XP?

SFiorito · 12-18-2004, 11:59 AM

Could be. The Arcpatch needs to match the drive you want protected.

multi(0)disk(0)rdisk(0)partition(1) == Primary IDE channel, master, 1st partition

How is your EWF drive hooked up? You made sure ewf.sys is in the right spot?

SlashEMc2k · 12-18-2004, 12:34 PM

Just checked.
I have the 20 GB HD setup as the primary IDE.
ewf.sys is located in windows/system32

When I boot into last good configuration I get this error?
Net Service Configuration
The Specified service does not existas an installed service could this be because of the ewf.sys? do I have to install it someway into the system32 directory?

SFiorito · 12-18-2004, 12:42 PM

ewf.sys is in System32? Reread step 4 under EWF.

SlashEMc2k · 12-18-2004, 12:48 PM

woops.
My Bad..

where does the protected drive get set?

when I run ewfmgr c: from console
I get the error:
Failed getting protected volume configuration with error 1

any ideas?
I have checked the registry and this is fine and matches up with the registry in the document. ewf.sys is also now in the correct folder.

SlashEMc2k · 12-19-2004, 10:36 AM

is this correct?

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\Session Manager]
BootExecute=""

SFiorito · 12-19-2004, 10:44 AM

yes, that registry value just prevents automatic scandisk on bootup. so you have EWF installed now? And your reg values are all correct? Did you remove all other harddrives from your system when you booted up? Is your EWF drive the c: drive?