Using EWF on regular WinXP

**SFiorito** · 11-28-2004, 12:17 PM

Hmmm... that doesn't sound right, because the special NTLDR is supposed to prevent writes during bootup. You copied that file over as well? I always get that bootup error message, which is why I disabled it in the bootup options. That happens because I guess EWF filters out a write to the registry somewhere so Windows always thinks you didn't bootup successfully last time. Look at the harddrive activity light on VirtualPC. Green is reading, red is writing. You shouldn't be getting any red lights. I don't.

**lopan** · 11-28-2004, 04:06 PM

been playing with it all day, it seems to flash red once right before the xp loading screen... none after that... still not right?

And yeah I got the special ntldr, renamed ntldr and everything....

**SFiorito** · 11-28-2004, 07:23 PM

okay, i checked using vmware and performance logs and it looks like there is indeed 1KB written to the drive on bootup. I guess it's not horrible, but when I have some time I'm going to check to see if it does that in XP Embedded as well. Maybe it just needs to. I still get that error message asking to boot up normally though.

**lopan** · 11-28-2004, 07:35 PM

I think most CF's can do hundreds of thousands if not millions of writes.... I'm guessing if it's only 1kb every boot, it might give out sometime in the year 2050??

most likely it'll get updated to something new well before then...

**lopan** · 11-28-2004, 07:40 PM

BTW: dunno if it was already covered, but did you disable the page file? I did, got everything on the disk down to about 500mb.... but dunno how that'll affect performance, or how ewf handles the page file.

I somehow managed to remove hibernate though, so messing with nlite to get it back, any clues on what to NOT remove to keep that? nlite just has a checkbox to disable hibernate, however whether I check or uncheck it seems to not be included.

**SFiorito** · 11-28-2004, 08:26 PM

Yeah, I talked about the pagefile towards the beginning of the thread. It shouldn't affect anything as long as you've got enough RAM. And even then, with nLite I've seen memory usage hover around 70MB!! I've got 512MB of RAM on my system so I'm sure I'll be fine.

Can't help you with getting hibernation back. I've just been messing with nLite for a day. BTW, in case you're using VirtualPC, it doesn't support hibernation.

**lopan** · 11-28-2004, 08:39 PM

could that be why it's not showing up under the power section? or should it be there just not functional?

**SFiorito** · 11-28-2004, 08:55 PM

If your PC doesn't support hibernate it won't show up in the options. VMWare supports it, but crashes coming out of hibernation. I've used it successfully on my via carpc hardware so I know EWF and hibernate work together.

**lopan** · 11-29-2004, 10:15 PM

I'm running Virtual PC 2004, hibernation works like a charm.

Have you been able to get the install size down any? With hibernation enabled, which has shown some blazing boot speeds, I can't get it under 977mb.... I can't get hiberfil.sys under 520mb...