寫入篩選器排除項目Write filter exclusions

您可以將受保護磁片區上的特定檔案或資料夾新增至檔案排除清單,以排除這些檔案和資料夾免于由 UWF 篩選。You can add specific files or folders on a protected volume to a file exclusion list to exclude those files and folders from being filtered by UWF. 當檔案或資料夾位於磁片區的排除清單時,所有寫入該檔案或資料夾的都會略過 UWF 篩選,並直接寫入受保護的磁片區,然後在裝置重新開機之後保存。When a file or folder is in the exclusion list for a volume, all writes to that file or folder bypass UWF filtering, and are written directly to the protected volume and persist after the device restarts.

您必須使用系統管理員帳戶在執行時間新增或移除檔案或資料夾排除專案,而且必須重新開機裝置,新的排除專案才會生效。You must use an administrator account to add or remove file or folder exclusions during run time, and you must restart the device for new exclusions to take effect.

重要

請勿新增下列專案的排除專案:Don't add exclusions for the following:

  • \Windows\System32\config\DEFAULT
  • \Windows\System32\config\SAM
  • \Windows\System32\config\SECURITY
  • \Windows\System32\config\SOFTWARE
  • \Windows\System32\config\SYSTEM
  • \Users\<User Name>\NTUSER.DAT
  • \Windows\BOOTSTAT.DAT
  • <System Drive>\EFI\Microsoft\Boot\BOOTSTAT.DAT
  • <System Drive>\Boot\BOOTSTAT.DAT

此外,請勿新增下列專案的排除專案:Also, don't add exclusions for the following:

  • 磁片區根目錄。The volume root. 例如,C:或 d:For example, C: or D:.
  • \Windows系統磁碟區上的資料夾。The \Windows folder on the system volume.
  • \Windows\System32系統磁碟區上的資料夾。The \Windows\System32 folder on the system volume.
  • \Windows\System32\Drivers系統磁碟區上的資料夾。The \Windows\System32\Drivers folder on the system volume.
  • 分頁檔案。Paging files.

不支援為這些專案新增排除專案,而且可能會導致無法預期的結果。Adding an exclusion for any of these items is unsupported and may lead to unpredictable results. 您可以排除這些位置下的子目錄和檔案。It's OK to exclude subdirectories and files under these locations.

資料夾必須先存在,才能將它們新增至排除清單。Folders need to exist prior to adding them to the exclusion list.

您無法將檔案或資料夾從受保護的位置重新命名或移動到未受保護的位置,反之亦然。You cannot rename or move a file or folder from a protected location to an unprotected location, or vice versa. 當寫入篩選器為作用中,且您嘗試刪除 Windows 檔案總管中排除的檔案或資料夾時,系統會嘗試將檔案或資料夾移至資源回收筒。When write filters are active and you attempt to delete an excluded file or folder in Windows Explorer, the system attempts to move the file or folder to the Recycle Bin. 這會導致錯誤,因為您無法將未篩選的檔案移至受寫入篩選器保護的位置。This causes an error, because you cannot move files that are not filtered to a location that is write filter protected.

若要解決此問題,您可以停用資源回收筒。To work around this, you can disable the Recycle Bin. 或者,使用者可以按 Ctrl + Shift,然後以滑鼠左鍵按一下檔案以直接刪除排除的檔案,略過資源回收筒,或者使用者可以直接從命令提示字元刪除排除的檔案。Alternatively, the user can press Ctrl+Shift and then left-click on the file to directly delete the excluded file, bypassing the Recycle Bin, or the user can delete the excluded file directly from a command prompt. 您必須重新開機裝置,新的排除專案才會生效。You must restart the device for new exclusions to take effect.

虛擬硬碟 (VHD) 檔排除Virtual Hard Disk (VHD) file exclusions

當您在 VHD 開機磁片上部署具有 UWF 的 Windows 10 企業版映射時,您可以在啟用 UWF 並保護磁片區之前,先新增 VHD 檔案的檔案排除,以保護包含 VHD 檔案的磁片區。When you deploy a Windows 10 Enterprise image with UWF on a VHD boot disk, you can protect the volume that contains the VHD file by adding a file exclusion for the VHD file before enabling UWF and protecting the volume.

若要在系統管理員命令提示字元中新增 VHD 檔案的檔案排除:To add a file exclusion for the VHD file at an administrator command prompt:

uwfmgr.exe file add-exclusion <drive containing VHD file>:\<path to VHD file>\<VHD file name>.vhd

例如:For example:

uwfmgr.exe file add-exclusion E:\VHD\test.vhd

登錄排除專案Registry exclusions

您可以將特定登錄機碼新增至排除清單,以排除這些金鑰不受 UWF 篩選。You can add specific registry keys to an exclusion list to exclude those keys from being filtered by UWF. 當登錄機碼位於排除項目清單中時,所有寫入該登錄機碼的項目都會略過 UWF 篩選,直接寫入登錄並在裝置重新啟動之後持續留存。When a registry key is in the exclusion list, all writes to that registry key bypass UWF filtering and are written directly to the registry and persist after the device restarts.

您必須使用系統管理員帳戶來新增或移除執行時間的登錄排除專案,而且必須重新開機裝置,新的排除專案才會生效。You must use an administrator account to add or remove registry exclusions during run time, and you must restart the device for new exclusions to take effect.

如果您排除一個登錄機碼,也會排除其所有子機碼的篩選。If you exclude a registry key, all its subkeys are also excluded from filtering. 您只能在下列登錄機碼底下排除登錄子機碼:You can exclude registry subkeys only under the following registry keys:

  • HKEY\LOCAL\MACHINE\BCD00000000
  • HKEY\LOCAL\MACHINE\SYSTEM
  • HKEY\LOCAL\MACHINE\SOFTWARE
  • HKEY\LOCAL\MACHINE\SAM
  • HKEY\LOCAL\MACHINE\SECURITY
  • HKEY\LOCAL\MACHINE\COMPONENTS

重要

請勿新增下列專案的排除專案:Don't add exclusions for the following:

  • HKLM\SECURITY\Policy\Secrets\$MACHINE.ACC

注意

UWF 會自動排除某些登錄機碼,無法進行篩選。UWF automatically excludes certain registry keys from being filtered. 這些登錄機碼主要與 UWF 設定相關,無法從排除清單中移除。These registry keys are primarily related to UWF configuration settings and cannot be removed from the exclusion list.

如需常見登錄排除專案的詳細資訊,請參閱 常見的寫入篩選器排除For more information about common registry exclusions, see Common write filter exclusions.

一般寫入篩選器排除Common write-filter exclusions

某些服務和功能會將資訊寫入裝置的持續性磁片區,並預期該資訊會在裝置重新開機時出現。Some services and features write information to a device’s persistent volume, and expect that information to be present across device restarts. 您可能需要設定寫入篩選器,以允許特定檔案和登錄排除,這些服務和功能才能正常運作。You may need to configure your write filter to allow for specific file and registry exclusions in order for these services and features to work correctly.

本主題列出登錄和排除的檔案,可協助您在啟用寫入篩選器時,讓某些常見的服務和功能正常運作。This topic lists registry and file exclusions that can help enable some common services and features to work correctly when write filters are enabled.

如果您在 UWF 以外執行任何防毒軟體或安全性軟體,請洽詢您的防毒軟體廠商,以取得如何在 UWF 環境中設定解決方案的建議。If you are running any antivirus or security software in addition to UWF, please consult with your antivirus vendor for advice on how to configure their solution in a UWF environment. 您可能需要為 signature 或 update 資料夾新增 UWF 排除。You may need to add a UWF exclusion for the signature or update folder.

客戶經驗改進計畫 (CEIP)Customer Experience Improvement Program (CEIP)

當您選擇參與 CEIP 時,您的電腦或裝置會自動傳送資訊給 Microsoft,說明您如何使用特定產品。When you choose to participate in the CEIP, your computer or device automatically sends information to Microsoft about how you use certain products. 來自您電腦或裝置的資訊會與其他 CEIP 資料結合,以協助 Microsoft 解決問題,並改善客戶最常使用的產品與功能。Information from your computer or device is combined with other CEIP data to help Microsoft solve problems and to improve the products and features customers use most often.

CEIP 資料會儲存在副檔名為 sqm 的檔案中。CEIP data is stored in files that have a .sqm file name extension. 若要確定在已啟用寫入篩選器的裝置上,可以使用 sqm 檔案中的 CEIP 資料,您可以為該 sqm 檔案和資料夾新增檔案和資料夾排除專案。To make sure that the CEIP data in the .sqm files is available on a device that has write filters enabled, you can add file and folder exclusions for the .sqm files and folders.

若要在您的裝置上尋找 sqm 檔案和資料夾,請使用檔案總管來搜尋 sqm 檔案。To locate the .sqm files and folders on your device, search for .sqm files by using File Explorer. 或者,在命令提示字元中,以磁片磁碟機根目錄的系統管理員許可權輸入下列命令,以取得裝置上的 sqm 檔案清單:Alternately, at a command prompt with administrator rights at the root of the drive, type the following command to obtain a list of .sqm files on the device:

dir *.sqm /s

針對位於您裝置上的任何 sqm 檔案,新增所需的檔案和資料夾排除專案。Add file and folder exclusions as required for any .sqm files located on your device.

新增下列登錄機碼的登錄排除專案:Add registry exclusions for the following registry keys:

  • HKEY _ 本機 _ 電腦 \ 軟體 \ 原則 \ Microsoft \ SQMClient \ Windows \ CEIPEnableHKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows\CEIPEnable

  • HKEY _ LOCAL _ MACHINE \ Software \ Microsoft \ SQMClient \ Windows \ CEIPEnableHKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\CEIPEnable

  • HKEY _ LOCAL _ MACHINE \ Software \ Microsoft \ SQMClient \ UploadDisableFlagHKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\UploadDisableFlag

背景智慧型傳送服務 (BITS)Background Intelligent Transfer Service (BITS)

背景智慧型傳送服務 (位) 在用戶端與伺服器之間下載或上傳檔案,並提供與傳輸相關的進度資訊。Background Intelligent Transfer Service (BITS) downloads or uploads files between a client and server and provides progress information related to the transfers.

新增下列資料夾和檔案的檔案排除:Add file exclusions for the following folders and files:

  • % ALLUSERSPROFILE% \Microsoft \ 網路 \ 下載程式% ALLUSERSPROFILE%\Microsoft\Network\Downloader

新增下列登錄機碼的登錄排除專案:Add registry exclusions for the following registry keys:

  • HKEY _ LOCAL _ MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ BITS \ StateIndexHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\BITS\StateIndex

Windows 檔案總管Windows Explorer

當寫入篩選器為作用中,且您嘗試刪除 Windows 檔案總管中排除的檔案或資料夾時,系統會嘗試將檔案或資料夾移至資源回收筒。When write filters are active and you attempt to delete an excluded file or folder in Windows Explorer, the system attempts to move the file or folder to the Recycle Bin. 這會導致錯誤,因為您無法將未篩選的檔案移至受寫入篩選器保護的位置。This causes an error, because you cannot move files that are not filtered to a location that is write filter protected.

若要解決此問題,您可以停用資源回收筒。To work around this, you can disable the Recycle Bin. 或者,使用者可以按 Ctrl + Shift,然後以滑鼠左鍵按一下檔案以直接刪除排除的檔案,略過資源回收筒,或者使用者可以直接從命令提示字元刪除排除的檔案。Alternatively, the user can press Ctrl+Shift and then left-click on the file to directly delete the excluded file, bypassing the Recycle Bin, or the user can delete the excluded file directly from a command prompt.

網路Networks

當您在裝置上使用寫入篩選器時,您可以新增檔案和登錄排除專案,讓您的裝置能夠加入有線和無線網路。When you use write filters on your device, you can add file and registry exclusions to enable your device to join wired and wireless networks. 您的裝置可能需要下列檔案和登錄排除專案。The following file and registry exclusions may be required on your device.

用戶端群組原則物件 (GPO) 登錄機碼:Client Group Policy Object (GPO) registry keys:

  • 無線: HKEY _ 本機 _ 電腦 \ 軟體 \ 原則 \ Microsoft \ Windows \ Wireless \ GPTWirelessPolicyWireless: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Wireless\GPTWirelessPolicy
  • 有線: HKEY _ 本機 _ 電腦 \ 軟體 \ 原則 \ Microsoft \ Windows \ WiredL2 \ GP _ 原則Wired: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WiredL2\GP_Policy

GPO 原則檔:GPO policy files:

  • 無線: C: \ Windows \ wlansvc \ 原則Wireless: C:\Windows\wlansvc\Policies
  • 有線: C: \ Windows \ dot2svc \ 原則Wired: C:\Windows\dot2svc\Policies

介面設定檔登錄機碼:Interface profile registry keys:

  • 無線: HKEY _ LOCAL _ MACHINE \ SOFTWARE \ Microsoft \ wlansvcWireless: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\wlansvc
  • 有線: HKEY _ 本機 _ 電腦 \ 軟體 \ Microsoft \ dot3svcWired: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dot3svc

介面原則檔:Interface policy file:

  • 無線: C: \ ProgramData \ Microsoft \ wlansvc \ 設定檔 \ 介面 \ {* < Interface > guid***} \ {*** < Profile > guid*} .xmlWireless: C:\ProgramData\Microsoft\wlansvc\Profiles\Interfaces\{<Interface GUID>}\{<Profile GUID>}.xml
  • 有線: C: \ ProgramData \ Microsoft \ dot3svc \ 設定檔 \ 介面 \ {* < Interface > guid***} \ {*** < Profile > guid*} .xmlWired: C:\ProgramData\Microsoft\dot3svc\Profiles\Interfaces\{<Interface GUID>}\{<Profile GUID>}.xml

服務登錄機碼:Services registry keys:

  • 無線: HKEY _ LOCAL _ MACHINE \ SYSTEM \ CurrentControlSet \ services \ WlansvcWireless: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Wlansvc
  • 無線: HKEY _ LOCAL _ MACHINE \ SYSTEM \ CurrentControlSet \ services \ WwanSvcWireless: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WwanSvc
  • 有線: HKEY _ LOCAL _ MACHINE \ SYSTEM \ CurrentControlSet \ services \ dot3svcWired: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\dot3svc

重要

資料夾必須先存在,才能將它們新增至排除清單。Folders need to exist prior to adding them to the exclusion list.

日光節約時間 (DST) Daylight saving time (DST)

您可以新增下列登錄排除專案,以保存您裝置上 (DST) 設定的日光節約時間。You can add the following registry exclusions to persist daylight saving time (DST) settings on your device.

  • HKEY _ 本機 _ 電腦 \ 軟體 \ Microsoft \ Windows NT \ CurrentVersion 的 \ 時區HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones

  • HKEY _ 本機 _ 電腦 \ 系統 \ CurrentControlSet \ 控制項 \ TimeZoneInformationHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation

統一寫入篩選器Unified Write Filter

服務 UWF 保護裝置Service UWF-protected devices

整合寫入篩選器 WMI 提供者參考資料Unified Write Filter WMI provider reference