Enhanced Write Filter (Standard 8 Module Reference)

7/8/2014

Review the settings, dependencies and any notes for the Enhanced Write Filter module in the Windows Embedded 8 Standard (Standard 8) module catalog.

This module provides the Enhanced Write Filter (EWF) with WMI. EWF intercepts writes to protected volumes at the sector level. Operating at the sector level means that EWF fully supports the NTFS file system.

EWF does not allow file exclusions. You can enable registry exclusions by using Registry Filter. If a volume is protected by EWF, the entire volume is considered write-protected. For more information about EWF, see Write Filters Overview.

Name	Enhanced Write Filter
Category	Lockdown\Compatibility Write Filters
Supported Architecture	x86, x64

Settings

This feature module includes the following settings.

• ProtectedVolumes
  • Volume
    • DiskNumber
    • EnableLazyWrites
    • EwfOptimization
    • Key
    • PartitionNumber
• BootStatusPolicy
• DisableDefragSvc
• EwfMode
• ProtectBcdPartition
• EnablePrefetcher
• EnableSuperfetch
• PagingFiles
• DisableSR

Dependencies for x86-Based Devices

When you include this module in your image, any modules that are required are automatically added to your image. To add specific functionality, you can add optional modules.

Required Module

None.

Dependencies for x64-Based Devices

When you include this module in your image, any modules that are required are automatically added to your image. To add specific functionality, you can add optional modules.

Required Module

None.

Common Uses

None defined.

Notes

Volume

You can use the Action setting attribute to specify the action to take when you use the configuration file to create or modify an image. The following table shows the possible values.

Value	Description
AddListItem	Adds the item or items to an image.
ModifyListItem	Modifies the value or the item as specified in Key or Value in an image.
RemoveListItem	Removes the item or items in an image.

See Also

Concepts

Legacy Write Filters