#1
Posted 19 February 2012 - 11:26 PM
I used diskpart and I had the same problem, when i tried to set the disk to READONLY, but i was able to set the volume to READONLY. I assigned a letter and tried to write to it and it blocked the attempt.
This also happen on a laptop, which had a 0 raid. I thought it was due to the raid, but i was able to access it, scan it, but with out write protection.
Other hardrives and USB thumbdrives in the system were able to be set to disk READONLY, using Dpart.
Another thing: Dpart is rather easier to use, but it does not have an option to assign a letter to a drive, or make a volume READONLY, is this normal?
Is it possible to add a script to WinFE to add the CMD prompt at the desktop, or a DISKPART shortcut at the desktop.
Is it also possible to add a short set of instructions on how to use Dpart and Diskpart on the desktop? I'm trying to get my agency to use this program, but i have to make it "tourist" friendly.
#2
Posted 20 February 2012 - 10:41 AM
I had a quick look.
The "official" diskpart command is:
http://technet.micro...5(v=ws.10).aspxdiskpart attribute set volume read-only
http://winfe.wordpre...winfe/diskpart/
i.e. the "read-only" is an attribute of the volume object, not of the disk one.
Dpart is Dpart.cmd, a simple batch file and it is nothing but a "shell" to diskpart, open it in Notepad ,in the first few lines you will find:
It actually does send a command:title dpart (command line shell for diskpart)
which is seemingly UNdocumented in the main page above.attribute disk set readonly
BUT is given here:
http://support.microsoft.com/kb/971436
and here:
http://www.forensicf...&pid=360&page=4
I guess you need a proper explanation by RoyM.
Can it be that these are Dynamic volumes?
It is not clear if they are supported:
http://reboot.pro/15883/
http://reboot.pro/15935/
Wonko
#3
Posted 20 February 2012 - 08:33 PM
#4
Posted 20 February 2012 - 10:57 PM
#5
Posted 21 February 2012 - 12:05 AM
#6
Posted 21 February 2012 - 12:34 AM
For the technically disadvantaged, that can include how to get DiskPart up and running (Click "here", type "this", now type "this", etc...).
#7
Posted 21 February 2012 - 03:14 PM
For the users that need DiskPart commands in front of them when using WinFE (that would be me!), it is easy enough to have the desktop/wallpaper be a graphic of the DiskPart commands. No need to open a text file or have a notepad at your side, the commands can be on the desktop.
For the technically disadvantaged, that can include how to get DiskPart up and running (Click "here", type "this", now type "this", etc...).
great suggestion,I'm going to work on that tonight
Also tagged with one or more of these keywords: winfe
Groups →
Windows Extreme →
Windows PE →
REG command not recognizingStarted by Blackbeauty , 24 Mar 2016 winpe, winfe |
|
|
||
Groups →
Windows Extreme →
Windows PE →
Speed of tools installed in WinFEStarted by Blackbeauty , 24 Jun 2015 winpe, winfe |
|
|
||
Groups →
Security →
Forensics →
WinFE →
Adding Drivers to WinFEStarted by llewis , 25 Oct 2013 drivers, winfe |
|
|
||
|
Boot methods & tools →
WinBuilder →
Projects →
Mini-WinFEStarted by misty , 14 Oct 2013 windows forensic environment and 1 more... |
|
|
|
Groups →
Community forum →
Hello world! →
Hello! Questions commence...Started by llewis , 12 Sep 2013 script, portable, build, winfe and 2 more... |
|
|
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users