30 replies to this topic

[Olof Lagerkvist]

it's possible to mount remote raw image?

 

something like devio 9000 \\.\physicaldrive0 /argument........ on a remote winpe

and use imgmount to mount the raw image?

 

I don't know if ImgMount handles that, but I use the new command line interface to Arsenal Image Mounter for such things.

 

on the remote PE/RE/etc:

devio 9000 \\.\physicaldrive0 0

Notice the last 0 to specify the entire drive rather than a partition. Add -r right after devio if you want to mount read-only.

 

on the client:

aim_ll -a -t proxy -o ip -f ip-address-of-PE

 

I have used this a few times now myself and it seems to work pretty well.

[steom]

great!

thanks Olof.

 

seems to work pretty well but only with if  using devio -r read only 

without i got an infinite series of errors on devio

and aim_ll needs to be terminated

aim_ll.exe -a -t proxy -o ip -f 10.0.0.10

Creating device...
Created device 000000 -> 10.0.0.10
Disk device is \\?\PhysicalDrive2
Attached disk volume \\?\Volume{bd8e90e4-7403-11e5-bec0-c89cdc34eab9}
^C

devio 9000 \\.\physicaldrive0 0

Successfully opened '\\.\physicaldrive0'.
Image size used: 21474836480 bytes.
Total size: 21474836480 bytes. Using 21474836480 bytes from offset 0.
Required alignment: 1 bytes.
Buffer size: 2097152 bytes.
Waiting for connection on port 9000. Press Ctrl+C to cancel.
Got connection from 10.0.0.11:57480.
Device write: Bad file descriptor
Write error (code 9) at 32018432: Req 4096.
Device write: Bad file descriptor
Write error (code 9) at 32018432: Req 4096.
Device write: Bad file descriptor
Write error (code 9) at 32018432: Req 4096.
Device write: Bad file descriptor
Write error (code 9) at 32018432: Req 4096.
Device write: Bad file descriptor
Write error (code 9) at 3216105472: Req 4096.

Edited by steom, 16 October 2015 - 01:36 PM.

[Olof Lagerkvist]

Ah, yes. You cannot directly write to a PhysicalDrive with partitions on it unless the disk is "dismounted"/"offline" etc.

 

In diskpart:

select disk 0

offline disk

 

Make sure that the disk really gets offline by typing list disk and see what it says about that. I have seen a few cases, particularly in Windows 7 where I have had to try a few times before the disk is actually offline.

[Wonko the Sane]

Ah, yes. You cannot directly write to a PhysicalDrive with partitions on it unless the disk is "dismounted"/"offline" etc.

... on recent Windows OS's .... (should work on XP )

 

 

Wonko

[v77]

... on recent Windows OS's .... (should work on XP )

 

Yes, this is a "security feature" introduced in Vista. To complete what Olof said, if the drive is active, you can still write directly on it, but only where there is no partition or no recognized file system.

[Wonko the Sane]

Yes, this is a "security feature" introduced in Vista. To complete what Olof said, if the drive is active, you can still write directly on it, but only where there is no partition or no recognized file system.

Yep , and at the time a (clever) workaround was devised (just for the record) and then a couple "dedicated" tools were developed:

http://reboot.pro/to...sector/?p=73590

http://reboot.pro/to...069-lockvolume/

http://reboot.pro/to...t-v0300-update/

 

Wonko