New EWF + MinLogon and CF instructions

**DigitalVampire** · 12-06-2007, 11:17 AM

Excellent AnthonyE12,

This will take the hardwork out of the equation...I havent got time to test it yet, hope to do so this weekend,

**AnthonyE12** · 12-06-2007, 03:02 PM

Haven't tested it myself either, my software config isn't completely ready yet.
But it looks really good, please let me know if it works out for you.

**DiGLoW** · 12-15-2007, 04:28 AM

I have installed the EWF Tool that AnthonyE12 mentioned and have had mixed success.

The EWF part of the tool works well. It installs with a click. Easy to turn on and off via command line.

The HORM also worked, but I could not ever disable the write filter one I had hibernated. Over and over again, no matter what it said, after rebooting, everything would still be how they were the first time I booted.

I was using files from an older Windows XP Embedded trial version -- the tool listed my ewf.sys file and others as version 2.0.917.0, while it requested version 2.0.927.0. I need to get my hands on a trial copy of the newer version so I can get those newer files!

**DigitalVampire** · 12-15-2007, 09:59 AM

I have installed AnthonyE12's utility with latest version of files from Windows XP Embedded trial version. The EWF works great...

I'm testing it on a old (very old - P3) PC. So I could not test HORM functionality. I get a BSOD when I try to hibernate in the last step. Must be because of the old PC not supporting auto switch-off after the hibernation files are written to.

Thanks for making this great utility. Definetely makes it easy to jump into the EWF bandwagon.

An improvement could be to have buttons to en/disable EWF once installed....

**jonessc** · 12-20-2007, 03:05 PM

Just clarify to....

From what ive read and understand it is possible to have a partitioned hard drive (c:/d) i plan on making the c drive about 4gig and the rest of the space going to the other drive (for music etc)

i want to put EWF on the C drive only (Using HORM), and install Road Runner, and GPS etc on the other parition so that is saves the state of road runner and everything carrys on as normal on power up.

Are there any risks im missing here?

My ultimate goal is to prevent anything happening to windows, sometimes on a fresh boot it blue screens, but its 100% error free when hibernating

**Kimota** · 01-27-2008, 02:42 AM

Hi SFiorito.

Are the instructions for ewf and horm correct on GranTuring?

I followed instructions but on 2X 2.5 drives in raid 0 and was unable to get horm working correctly.

Following the directions on this post "Just HORM only" which makes references to your site I was able to get HORM working.

The directions on GranTuring do not mention the ewfapi.dll, ewfdll.dll or the horm.dat (which I believe replaces the resmany.dat)

Also wanted to say thanks the combination of minlogon, ewf and horm work great thanks for all your GREAT info.

**SFiorito** · 01-28-2008, 12:05 AM

Hey, thanks for catching that.....I updated the site to use "horm.dat" instead of the old "resmany.dat". ewfdll.dll is used by the XPe First Boot Agent. That DLL has functions to create the partition and configure EWF. ewfapi.dll essentially provides programmatic access to the ewfmgr.exe functions. So they're not necessary just for running EWF.

**Kimota** · 02-06-2008, 03:58 PM

Hello,

I've to related questions about EWF

1. How can you enable EWF on a second partion (I.E having EWF activated on C: and D: drive)

2. How can you enable EWF on a second hard drive (I.E having EWF activated on C: being the boot hard drive, and D: being the data hard drive)

Thanks