New EWF + MinLogon and CF instructions

**iPal** · 07-31-2005, 06:52 PM

i tried to hibernate after ewf enabled...
i found interesting thing...
i works but after i shut down normally...
it boots up normal...
so i think it still writes states when shutting down...
but ewf looks working nothing else changed...
what did i do wrong or miss?

**SFiorito** · 07-31-2005, 09:16 PM

you created the resmany.dat file on your C drive with ewf disabled, re-enabled ewf, and rebooted? you have the ewf version of ntldr installed? when you run ewfmgr it gives you a good status?

**iPal** · 07-31-2005, 10:51 PM

Originally Posted by SFiorito

you created the resmany.dat file on your C drive with ewf disabled, re-enabled ewf, and rebooted?

yes

Originally Posted by SFiorito

you have the ewf version of ntldr installed?

yes

Originally Posted by SFiorito

when you run ewfmgr it gives you a good status?

yes

somehow i hibernate twice in a row then now it seems like doing HORM
but after couple of boots from HORM i get blank screen then no response...

**xtra** · 08-19-2005, 03:57 PM

will the ewf method work on windows 2003 with minilogon?

**SFiorito** · 08-19-2005, 04:19 PM

it might...haven't tried it myself though.

**Moneyfink** · 08-28-2005, 08:03 PM

I am installing minlogon, and whenever i rename the original winlogon file it automatically creates a new one. I have changed windows/system32 froma read only folder. When ever i change it, it automatically revert, this is so friustrating, I have tried changing the attributes using a command line prompt, and can't do it that way either

**Moneyfink** · 08-28-2005, 08:19 PM

if i replace winlogon before it regenerate, it automatically changes the file.

Here is what im saying... minlogon is 17k, and winlogon is 491k

I make a rename winlogon.exe to winlogon_bak.exe or winlogon.exe.bak

then i paste minlogon in windows\system32

By the time i do this, a new winlogon.exe appears, and the backup one is still there as well

So Before i move minlogon, i rename it to winlogon (17kb) , then i click copy

I go to windows\system32, delete winlogon.exe (491kb) then quikly click paste, and winlogon (17kB) appears, then 10 seconds later winlogon become 491Kb.

The folder is not checked as read only now

wtf?!?!?

**SFiorito** · 08-28-2005, 09:14 PM

that's Windows File Protection. you need to disable it or replace winlogon in the dllcache folder I think? can't remember right now... if you use nLite you can disable Windows File Protection. either that or use a registry hack, search for SFCDisable

**Silentbob343** · 09-16-2005, 05:13 PM

I downloaded the eXP trial and noticed that there are 2 minlogon files. One is 15k and the other is 13k I'm currently using the 15k logon file, but crtl-alt-delete doesn't work any suggestions? Using the current minlogon I can't use windows update. I can launch it, select files, and even download them, but installation fails.

**SFiorito** · 09-16-2005, 05:42 PM

for CTRL-ALT-DEL look at the sticky thread right above this thread...

for Windows Update I recommend switching back to Winlogon, reboot, upgrade, switch back to minlogon, reboot.