Protecting Multiple Volumes By Using RAM Reg Mode

  • Article

You can extend EWF RAM Reg overlays to protect multiple volumes on a device by adding an additional registry key for each volume you want to protect.

To protect multiple volumes by using RAM Reg mode

  1. Follow the procedure in Configuring EWF RAM Reg Mode. Make sure that your EWF RAM Reg run-time image works.

  2. Add the following registry entry to your run-time image for each volume that you want to protect. You can add these to your configuration as extra resources, you can create a component for these registry keys, or you can update your run-time image after FBA runs by using regedit. For more information about how to add this registry key to your configuration, see Adding Registry Data to a Configuration in Windows XP Embedded Studio Help.

    Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protected\<Protected volume number>

    <Protected Volume number> is how EWF identifies the different protected volumes on your system. For example use, Volume0 for the first protected volume, Volume1, for the second protected volume, and so forth.

    Name: Type
    Type: REG_DWORD
    Value: 0x00000001 (1)

    Name: ArcName
    Type: REG_SZ
    Value: <path to protected volume>

    Where <path to protected volume> can be either the boot Arc path, for example, multi(0)disk(0)rdisk(0)partition(1), or the device path, for example, \device\harddisk0\partition1.

    For example, to protect both the C: and D: drives on the first hard disk, add the following registry keys.

    For C:, add the following key:

    Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protected\Volume0

    Name: Type
    Type: REG_DWORD
    Value: 0x00000001 (1)

    Name: ArcName
    Type: REG_SZ
    Value: multi(0)disk(0)rdisk(0)partition(1)

    For D:, add the following key:

    Key Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protected\Volume1

    Name: Type
    Type: REG_DWORD
    Value: 0x00000001 (1)

    Name: ArcName
    Type: REG_SZ
    Value: multi(0)disk(0)rdisk(0)partition(2)

See Also

EWF RAM Reg Mode | Troubleshooting Enhanced Write Filter | EWF Performance Considerations

Last updated on Wednesday, October 18, 2006

© 2006 Microsoft Corporation. All rights reserved.