11 replies to this topic

[MDCT]

Hello people,
I'm a newbie and this may have nothing to do with booting from CD or USB but I need your help regarding FWBF.

Little about me: I'm doing a project about virtualization, so it's concerning EWF, thinstall, SVS, Sandboxie, etc.
I have been trying to install EWF on 2 PCs, but failed, after looking and asking around but still got no answer, I decided to go on to FWBF.
But I do not understand how to customize or install it on normal XP professional, I read many people have script about FBWF here, so I assume installing on normal XP should be piece of cake for users here.

What I have done so far, I got FBWF files from thuun's website. And I implemented the registry based from this: http://www.osronline...cfm?link=106812
But unfortunately, it won't work.
Can someone with kind soul tell me how to install and customize FBWF on normal PC, or give me link to this information? I can't seem to find it after hours of searching.
Any help would be appreciated.
Thank you.

[was_jaclaz]

I have been trying to install EWF on 2 PCs, but failed, after looking and asking around but still got no answer,

Did you check the "standard" resources for EWF?

Here:
http://osf1.gmu.edu/.../eXPinstall.htm
http://www.mp3car.co...isplay.php?f=70

jaclaz

[MDCT]

Hi, thank you for the reply.

I did ask mp3car about my problems with EWF, but I still haven't got any answer. And as I have to do all about EWF, I would have to do FBWF eventually, so I asked here regarding the FBWF because people here create FBWF scripts. I did search but I'm stuck and don't know what to do.

The instruction, I did follow it, but still failed... and if I'm not mistaken the registry key referring to the file should be different as the files are different between EWF and FBWF, no?

EDIT (grammar n addition)

[was_jaclaz]

Yes, I am not at all familiar with FBWF, but they are completely different things.

I was referring to your failure to use EWF....

The "base" thread for FBWF use under PE builds is here:
http://www.911cd.net...showtopic=15282

but cannot say if and how much of the info there is applicable to "full" XP.

Maybe if you post the steps you took someone can point out where the problem might lie.

jaclaz

[MDCT]

Thank you for the link, jaclaz.. I will check on it.

My steps when I tried to install the EWF:
First I download the EWF files from: http://www.mp3car.co...f-download.html
After, I put the ewf.sys and ewfmgr.exe to \Windows\system32
And I put ewfntldr in the root of Windows and rename the original ntldr to ntldr_bak, and rename ewfntldr to ntldr.
After I create *.reg that contain the registry from the instruction, I set the permission using regedit and import the reg to registry. Turn off the system restore and change the pagefile to secondary HD and reboot.
But I got error 0x0000007B, I tried to turn off the secondary HD as I read somewhere that it's better to have one HD, it also failed.
I even tried it with clean install on portable Virtual PC 2007 that my friend and I tried to build, but it gives the same error... could be because of the portable VPC.

So I tried on another computer, but it also give the same error. I even tried to install XPE trial, because I suspect the EWF.sys is bad, but couldn't install as it asked to insert the disk.
After hitting dead end, I posted on mp3car, but until now I haven't got any answer.
And I decided to move on the FBWF.
Next, I will try to install XPE trial on VPC, hope it would work to get the needed files.

Edit:
To make things clear, which one should I install to get the file? The instruction doesn't explain this, perhaps it's getting outdated.
1. Windows XP Embedded SP1 Tools
2. SQL Server Desktop Engine
3. Windows XP Embedded SP1 Database
4. Windows XP Embedded SP2
Last time I tried to install all, only no 1 worked, other components asked to insert disk. Or perhaps someone would be so kind to send the EWF file?

[was_jaclaz]

I see.

Maybe you will find useful this:
http://www.911cd.net...o...16239&st=11

Also, do a search on 911CD for keyword "EWF%" (without quotes) with user "Dietmar" (again without quotes) and set to view the results as "posts", NOT "topic", the topic is this one:
http://www.911cd.net...showtopic=14181
but it is over 100 pages long and it is sometimes difficult to find the "right" info among them.

jaclaz

[pscEx]

...
and set to view the results as "posts", NOT "topic",
...

Thanks, jaclaz
When searching our forum, I always had troubles evaluating the result.

I did not recognize this little radio button

Peter

[MDCT]

Thank you, jaclaz for shorting my search. I will let you know if I able to make it works. My only worry is that the motherboards I use to test are not compatible with ArcName thingy... I also read conversation Dietmar and Slobodan somewhere about faking the ArcName, but I understand nothing about it as Dietmar was talking about making a driver.

[was_jaclaz]

The "ArcName thingy" is a direct consequence of having a MBR on the boot disk.

The arcpath is generated at boot time by Windows NT/2K/XP/2003 files, most probably by NTLDR, if it finds a MBR and partition table on boot media.


A (hypothetical) not compatible motherboard would not be able to boot ANY flavour of NT based system, only PE builds, which SETUPLDR.BIN needs not an arcpath.

jaclaz

[bilou_gateux]

After, I put the ewf.sys and ewfmgr.exe to \Windows\system32

typo error ?
wrong place for the driver .sys binary
copy ewf.sys to %SystemRoot%\system32\drivers

Thank you, jaclaz for shorting my search. I will let you know if I able to make it works. My only worry is that the motherboards I use to test are not compatible with ArcName thingy... I also read conversation Dietmar and Slobodan somewhere about faking the ArcName, but I understand nothing about it as Dietmar was talking about making a driver.

If you canno't have a valid ArcName\Path in your boot.ini

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\Windows
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="ACPI APIC uniprocessor HAL" /fastdetect /noexecute=alwaysoff /KERNEL=Ntoskrnl.exe /hal=Halaacpi.dll
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="ACPI APIC multiprocessor HAL" /fastdetect /noexecute=alwaysoff /KERNEL=Ntkrnlmp.exe /hal=Halmacpi.dll

EWF setting in registry to specify the partition to protect won't work:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ewf\Parameters\Protected\Volume0]
"Type"=dword:00000001
"Enabled"=dword:00000001
"CompareBeforeAlloc"=dword:00000000
"ArcName"="multi(0)disk(0)rdisk(0)partition(1)"

[MDCT]

typo error ?
wrong place for the driver .sys binary
copy ewf.sys to %SystemRoot%\system32\drivers

Shame on me, you are right bilou_gateux... now it works. I thought the EWF.sys and EWFmgr.exe, both were supposed to be on system32. I must have miss-read the tutorial, stupid me... I spend hours just because this stupid mistake, no wonder nobody in mp3car answers me.
Thank you jaclaz for making me wrote my steps and thank you bilou_gateux for correcting it.

Lesson: Error 7B could be because of missing EWF.sys on system32\driver.

After testing and reviewing the EWF, I will try to implement FBWF on normal XP. I will post results if I able to get FBWF to work.

[was_jaclaz]

I must have miss-read the tutorial, stupid me...

Don't feel too bad about it, it happens more often that you would think, it has been even "coded" into "general advice" , see point #d here :
http://www.boot-land...?...t=0&start=0

Happy EWF problem is solved .

jaclaz