EwfMode (Standard 8 Module Reference)


Review the applicable Feature modules and any examples for the EwfMode setting in Windows Embedded 8 Standard (Standard 8).

This setting specifies the mode in which to set Enhanced Write Filter (EWF). There are two different modes of EWF based on the implementation of the EWF volume. EWF stores the overlay data in RAM, but the volume can be placed in unpartitioned space on the media or within the system registry.

The following table shows the possible values.




Stores the EWF volume in unpartitioned space on disk.

You must also specify a protected volume for EWF. If there is no volume specified, the mode defaults to RAM Reg mode.

This mode requires additional configuration settings after you deploy the run-time image.


Stores the EWF volume in the registry. This is the default setting.

You can extend RAM Reg overlays to protect multiple volumes on a device by setting RAM Reg mode for each volume you want to protect.

The following table shows the modules that you can apply this setting to. In Image Configuration Editor (ICE), you can follow the corresponding path to set this setting for a module.



Enhanced Write Filter Management Tool

Features/Lockdown/Compatibility Write Filters/Enhanced Write Filter Management Tool/EwfMode

Enhanced Write Filter

Features/Lockdown/Compatibility Write Filters/Enhanced Write Filter/EwfMode

The following XML example shows how to store the EWF volume in unpartitioned space on a disk.