FBWF and EWF (Windows Embedded Standard 2009)

4/23/2012

Windows Embedded Standard provides two write filters: FBWF, which operates at the file level, and Enhanced Write Filter (EWF), which operates at the sector level. In most cases, FBWF is the better choice. However, only EWF fully supports NTFS. The following NTFS features are supported in EWF but not in FBWF:

  • File locking and unlocking
  • File ID in NTFS
  • Reparse points
  • Quota
  • Hard links
  • Opportunistic lock
  • File encryption

In addition, only EWF may be used with Hibernate Once Resume Many (HORM). HORM is not available when FBWF is used.

FBWF does not provide the following EWF functions:

  • Support for multiple overlays
  • Support for disk overlays
  • Live commit and disable

To use EWF and FWBF together in the same OS image, enable EWF on one volume and FBWF on another volume.