EwfMgrDisable (Standard 7 SP1)
7/8/2014
This function disables a currently enabled overlay on the specified volume, committing the current level if fCommit is TRUE, and discarding all overlays if fCommit is FALSE.
Syntax
BOOL EwfMgrDisable(
HANDLE hDevice,
BOOL fCommit
);
Parameters
- hDevice
[in] Handle to the EWF-protected volume.
- fCommit
[in] If TRUE, the current overlay is committed before the protection is disabled. If FALSE, all overlays are discarded and protection is disabled.
Return Value
If the function succeeds, the return value is TRUE. If the function fails, the return value is FALSE. Call GetLastError for extended error information.
Remarks
The overlay is disabled on the next restart.
This function is supported on both disk and RAM overlays. However, on a RAM overlay that does not have an associated EWF overlay store keeping track of its protection settings (that is, registry-described RAM overlays), the fCommit flag must be set to TRUE, or the disable fails.
Example
The DoEwfDisable function included in EWF API Code Sample (Sample.cpp) shows you how to use the EwfMgrDisable function.
Requirements
OS Versions: Standard 7
Header: Ewfapi.h
Link Library: Ewfapi.lib