XPe SP2 Write Filter

  • This topic is empty.
Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • #160
    AvatarAnonymous
    Member
    • Total Post: 162
    • Jacked into The Matrix
    • ★★★★★★

    With XPe SP2 on Wyse 9450 Terminals, is there still a way to configure the Write Filter in such as way that it will protect two partitions if you are using the factory HDD option?

    I remember in XPe SP1 (which seems to use a different Write Filter mechanism) you could configure the value via HKLMSystemControlSet001EnumIDEDiskFUJITSU…Device Parameters

    And setting the WFilterPartiton1 value from 0 to 3.

    Is there a similar option available for the EWF in the Wyse XPe SP2 build or isn’t applying the write filter to multiple partitions supported by Wyse?

    Cheers

    #8737
    Avatarthinkthin
    Member
    • Total Post: 1707
    • Jacked into The Matrix
    • ★★★★★★

    Hi,

    The Wyse Write filter is now a Microsoft Technology and works in a different manner but still can be configured. Check these links out:

    http://blogs.msdn.com/embedded/archive/2005/10/26/485389.aspx

    This artical:

    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnxpesp1/html/XPESP1_CF_EWF.asp

    notes the reg keys to be changed are now here:
    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesewfParameters]

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesewfParametersProtected]

    [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesewfParametersProtectedVolume0]
    “VolumeID”=”{1EA414D1-6760-4625-8CBE-4F9F85A48E15}”
    “Type”=dword:00000001
    “ArcName”=”multi(0)disk(0)rdisk(0)partition(1)”

    I haven’t tried this so give it a go and post back if it works!

    Cheers,
    -TT

    #8738
    AvatarAnonymous
    Member
    • Total Post: 162
    • Jacked into The Matrix
    • ★★★★★★

    Hi Mate,

    Thanks for your help with it. I’ve now sussed it out I think:

    These instructions are based on the Wyse 9450XE Terminal with the 20Gb Factory HDD option fitted and Wyse XPe SP2 Build 425 (the latest download from the Wyse website).

    After re-imaging to XPe SP2 via the Wyse Simple Imager (or Rapport – whatever flavour you like) you will end up with a 966mb partition (C: ) and a 17.6Gb partition (Y: by default).

    To enable the EWF on the second partition you must make the following modifications:

    1. Registry

    Navigate to HKLMSystemCurrentControlSetControlServicesEWFParametersProtected

    In here you will find a key called Volume0 with the following values:

    “ArcName”=”multi(0)disk(0)rdisk(0)partition(2)”
    “Enabled”=dword:00000000
    “Type”=dword:00000001
    “VolumeID”=”{1EA414D1-6760-4625-8CBE-4F9F85A48E15}”

    What you need to do is create another key under the Protected key called Volume1 with the following values:

    “ArcName”=”multi(0)disk(0)rdisk(0)partition(3)”
    “Enabled”=dword:00000000
    “Type”=dword:00000001
    “VolumeID”=”{1EA414D1-6760-4625-8CBE-4F9F85A48E15}”

    The reason it is Partition(3) is that the 17.6Gb partition has the ID of 3. To find out the partition ID if you don’t know, simply use the diskpart.exe tool.

    2. Write Filter Enable/Disable Scripts

    ThinkThin: I hope it is ok to post the contents of these scripts, if not please remove them

    Wyse have two shortcuts on the Administrators desktop by default to control the Write Filter named Write Filter Enable and Write Filter Disable.

    These two shotcuts call their respective batch file which in turn calls ewfmgr.exe and instructs it to either enable or flush and disable the Write Filter.

    Here are the contents of the modified files. Essentially you just have to add a new line to get ewfmgr.exe to activate the write filter on the second partition which is called Y: in keeping with its default drive letter (obviously you change this depending on what you have called the second partition).

    These two batch files are located in c:windowssystem32

    wfon.bat
    @c:windowssystem32ewfmgr c: -enable
    @c:windowssystem32ewfmgr y: -enable
    @shutdown -r -t 00

    wfoff.bat
    @c:windowssystem32ewfmgr c: -commitanddisable
    @c:windowssystem32ewfmgr y: -commitanddisable
    @shutdown -r -t 00

    So all you have to do is modify 2 files and add a registry key and you have Write Filter protection for your second partition on XPe SP2!

    Thanks to TT as always for your help 🙂

    Cheers

    -p

    #8739
    Avatarthinkthin
    Member
    • Total Post: 1707
    • Jacked into The Matrix
    • ★★★★★★

    Wow, great information! As for the scripts bring it on, if anyone else has something cool like this go for it and post. I did not have the answer for your question but knew where to start, its awesome to see someone take the initiate and run with it.

    Thanks for posting back!

Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.