Thread: New EWF + MinLogon and CF instructions

you don't need a second drive, just another partition for your media since it will be written to. otherwise you'd have to worry about disabling EWF before copying new media over. if you have a writable drive then you can easily add music to it without worrying about the EWF memory layer taking up all your RAM.

there's one issue though....if you plan on using HORM you may want to consider getting a USB drive you can unplug before creating your hibernation state. Microsoft recommends doing this to flush out the write cache for the media drive. Otherwise the write cache will be persisted with the HORM state and be present every time you boot up, possibly corrupting your drive.

ok i followed directions from http://granturing.blogspot.com/ for setting u minlogon.
Here is what I have done so far....I copied minlogon.exe to the system32 directory and renamed it winlogon.exe.

I then proceeded to try to modify the registry.

I navigated to:

Next modify the registry on the XP system by changing the "Config" value in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon key to be 0x17

using regedit.

I got to the \winlogon but could not find anything called "config"

Am I supposed to create it?

Anyway I created it and gave it a value of 0x17. Rebooted the computer and now it goes to the XP loading splash screen and just reboots. keeps doing also in safe mode.

did i do something wrong and what can i do to fix this?

Did you rename the old winlogon to winlogon.exe.bak?

If you have WFP enabled, theres a good chance windows has just replaced the new version, with the older version...

Hi Accordsick,

Did you keep a copy of the orginal winlogon? If so probably the easiest way is to remove the hard drive from your CarPC and add it as a slave to another PC if you have one. Then paste the orginal winlogon file in C:\WINDOWS\system32

You also mentioned you modified the registry but could not find config. Did you manually do this using regedit or did you create a .reg file as mentioned on http://granturing.blogspot.com/.

If not what you should do is create the .reg file simply open notepad and copy the text listed on http://granturing.blogspot.com/ save the text file then rename it for .txt to .reg. Once that is done double click the file and all the entries will be added to the registry.

P.S

when you rename the orginal winlogon and minlogon file I'd suggest you do it in safemode as its easer to get around windows file protection this way.

Hi,

Thought I would take on a weekend project and install WinXP on to a 2Gig Compact Flash drive. I followed the instructions from the top of this thread and have my harddrive singing a long with ewf. So I cleared a 150x Ridata card I had around, which is formated as FAT32, and pulled out a ide-cf adapter. Formatted drive, ran the bootprep, and copied the files over. During bootup, BIOS see's the CF as a hard drive (sectors and all) -- but would fail to find an OS. If I booted into BartPE, it couldn't see the CF drive at all.

So I am looking for some hints here -- and would greatly apprecate the help.

I, like accordvsick, followed granturing's instructions to the T. However, there was no mention of writing a .reg file, that I could see. So now, my carPC just goes into infinite loops. Swapping the drive and restoring the original winlogon.exe is no problem, but what are the instructions for the .reg file? What do I name it, and what do I write?

You don't need a REG file for MinLogon since there's only one setting to change. Take a look at step 6 here http://granturing.blogspot.com/2006/...-minlogon.html

When I went to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, I couldn't find anything that had "config" in the name, so I skipped that step. Now when I boot up, it simply goes into infinite loops. What am I supposed to do in step 6?

EDIT: Found it.
Post #1, step 3; http://www.mp3car.com/vbulletin/winn....html#cooliris

Create a file called minlogon.reg and using notepad copy the following text:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Config"=dword:00000017

Hi guys,

Im having a bit of a problem with EWF. I have a hard drive that is 250 gigs and I want about 220 gigs to be unprotected.
I tried using SDI disks but they wont let me go over 75 gigs. I tried programatically "dismounting" a partition of 220 gigs but then it wont even hibernate. Anyone have any ideas?