EWF RAM Reg Mode (Standard 7 SP1)

  • Article

7/8/2014

EWF RAM Reg mode resembles EWF RAM mode. It differs from the standard EWF RAM mode only in that the configuration information that is stored in the EWF volume is instead stored in the system's registry. EWF RAM Reg mode uses the following configuration:

  • The EWF Overlay is stored in RAM.
  • The EWF volume is stored in the system's registry.

Use RAM Reg mode in the following scenarios:

  • Protecting media that has only a single partition or media that cannot be partitioned.
  • Protecting removable media, such as CompactFlash, USB, or IEEE 1394 devices.
  • Protecting media that does not support standard RAM overlays.
  • Reducing the number of write operations that are made to write-sensitive devices, such as CompactFlash.

The following illustration shows an example of how EWF RAM Reg mode is configured on your device.

Ff795038.5ce01a80-35f5-4f88-a586-d71778653848(en-US,WinEmbedded.60).gif

Because the EWF volume information is kept in the registry, if the registry is write-protected, any attempts to disable EWF will fail. There are three ways that you can disable EWF in EWF Ram Reg mode:

  • Disable EWF, and then commit the overlay to the protected volume.
    For example:

    ewfmgr c: -disable
ewfmgr c: -commit

    Warning

    You must reboot the system in the previous scenario because the overlay is written to the protected volume on the next system restart.

-Or-

  • Use the CommitandDisable command to disable EWF and commit the overlay.
    For example:

    ewfmgr c: -commitanddisable

    Warning

    You must reboot the system in the previous scenario because the overlay is written to the protected volume on the next system restart.

-Or-

  • Use the -live option of the CommitandDisable command to disable EWF and commit the overlay to the protected volume without having to restart the system.
    For example:

    ewfmgr c: -commitanddisable -live

For more information, see EWF Manager.

For more information about how to configure EWF RAM Reg mode, see Configure EWF RAM Reg Mode.

You can also protect multiple volumes by using EWF RAM Reg modes. For more information, see Protect Multiple Volumes By Using RAM Reg Mode.

See Also

Concepts

EWF RAM Mode

Other Resources

EWF Modes