Using EWF on regular WinXP

**SFiorito** · 11-25-2004, 08:21 PM

knubile: yeah, I get the same thing. I didn't get it in VirtualPC (at least I don't remember getting it). I think the best bet is to just disable the recovery options in the System bootup settings. See my post above regarding hibernation... I did a quick search and it doesn't look like relocating the hiberfil.sys file is possible. Sorry man, but there's some drawbacks to using ewf unfortunately.

**knubile** · 11-25-2004, 08:28 PM

SFiorito. I didn't see that last post. Looks like you and I are trying to accomplish the exact same thing. CF card etc..
I can't figure out how yet, but the goal would be to have the system come out of hibernation every time regardless of how it was shutdown. Google for "EWF and hibernation". MS says it's possible. I just can't find anything detailing how.
I think the key question is how does windows now to resume from hibernation instead of a boot up regularly. If there's a way to put it in that state then enable EWF, then actually hibernate, I think it will work. This is assuming hibernation is detected by looking for a file or a registry key.

1. Disable EWF.
2. Hibernate from preferred state.
3. Resume
4. Set hibernated flag
5. Enable EWF

Shouldn't this had the hiberfil.sys file and the flag protected by ewf now? They key unknown here is step 4.

Anyone?

**SFiorito** · 11-25-2004, 08:35 PM

Oh okay, I see what you're saying now... and that makes perfect sense. Set the system in a "hibernation state" at the time you set EWF so that it always comes out of hibernation at the same state everytime. Makes sense! There's gotta be some boot setting we can find. Hmm... don't know how you can go about finding that... It would definitely be a good thing to have!

**SWC** · 11-25-2004, 08:36 PM

Files are up at http://test.crimsonstain.net/EWF.zip

Thanks

**jcdillin** · 11-25-2004, 09:31 PM

wow, i'm going to have to play with this. that would be awesome to be able to always resume instead of having to boot.

**Heezzi** · 11-25-2004, 11:10 PM

Originally Posted by knubile

Does anybody have any idea how to get hibernation to work with EWF? I want to try to get XP installed on a Compact Flash card so it'll survive winter here in Ottawa, Canada. That way I can hook my laptop drive as a removable USB device.

Anyone looked into ReadyOn for XP boot?

**Hell-Stopper** · 11-25-2004, 11:44 PM

ahhh great progress good work i have to admit

keep it up im going to test this tomorrow. cheers

**knubile** · 11-26-2004, 02:09 AM

I looked at ReadyOn. It would do it i think. But I don't think we can get single licenses. Besides. I bet it's nothing more than what we're trying to figure out. If we can do this, it'll be much better than using a 3rd party app.

**knubile** · 11-26-2004, 03:01 AM

Ok. Somebody try this.
Make sure you have EWF working(although I still get that windows failed to start up successfully message).
At a command prompt type

ewfmgr C: -commitanddisable

Reboot the system. You are now in a normal system with the filter turned off.

Go to power management and make sure hibernation is enabled.

At a command prompt type

ewfmgr C: -enable

Now go into hibernate.

My system started to resume from hibernate, then near the end of the resume progress bar I got a BSOD that immediately disappear and the system rebooted and start a regular boot process. I have no idea what happened, but it's something. I''m hoping this is because my system can't boot up properly with EWF enabled anyways. Can someone without that issue please try this?

**Heezzi** · 11-26-2004, 10:53 AM

Originally Posted by knubile

I looked at ReadyOn. It would do it i think. But I don't think we can get single licenses. Besides. I bet it's nothing more than what we're trying to figure out. If we can do this, it'll be much better than using a 3rd party app.

All you do is buy the SDK which is $25 make the hibernation image and then EWF it.