Windows 7: File Based Write Filter (FBWF) for win 7 from embedded

Hi

I used to use EWF (enhanced write filter) for an XP system running off a CF disk, it was brilliantly quick.



Now, I want to try the same with Windows 7, which if installed without write filter, is impossibly slow to use. I've downloaded the latest Windows Embedded Standard based on Win 7, which contains a new version of the File Based Write Filter.

Does anyone know if there's an easy way to install FBWF from the downloaded Embedded version in to a pre-existing Windows 7 installation?

Many thanks.

Hi,

Trying to acheive this as well. If you are still around, I would love to get the files you have from the Embedded OS you have. Microsoft Steady state installs on windows 7 but failes at installing the driver necessary to make the FBFW go active.

It creates the cache.wdp but when you try to enable it it deletes it. I tried manually to install the vcf.inf that comes with SteadyState but it failes. My hunch is maybe with the files you have we might be able to get the process to work.

PM me if you want to pursue. I will Post the directions if successful.

Cheers

I got it working on windows 7.

http://********************/?d=24F0NH09

There is the link to the script. Works on Windows 7 and XP SP3. This uses the new files from Embedded POS 2009 and Files from Windows 7. No support offered as it works for what we require internally.

Another Note : UAC must be off. I did not test running as admin.

Best of luck.

Cheers

@hispeedmike

Can you explain how to get it working?
I tried to install the file above at Windows 7 RC 1 (build 7100). Logged in as admin and turned off the UAC I executed the "FBWF Setup.exe" file. Then I choosed the Windows 7 button and Start. After completed installation, a reboot and execute "fbwfmgr /enable" at the CMD there comes the message:

"FbwfMgr: Unable to communicate with the file-based write filter."

What's the issue during installation? Should I install it with XP compatibility mode.
Thanks for your answer in advance...

One thing I noticed when I wen to install it on a clean box was the sysinternals app I use to get access to the registry to write the files requires you to accept the license. That little pause causes the script to exit and not complete.

Run it again and the license does not need to be accepted and it worked fine for me.

Hope this works, just post back here if it works or not...

Cheers

@hispeedmike

Unfortunately I've no chance any more to get the fbwf working with the script! No matter if I start the script as normal user, as admin or in compatibility mode, everytime I get the same error...
Please could you post the registry settings, I would like to try it manually. Afaik I have to copy the files in the Windows 7 folder into my matching windows folder, edit the registry and reboot the system?

Thanks in advance!

first step is to Allow Everyone full access to the:
HKLM\SYSTEM\CurrentControlSet\ENUM\Root]\

Under the following Keys inject the Required Values:

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF

"Start", "REG_DWORD", "00000000"
"Type", "REG_DWORD", "00000002"
"ErrorControl", "REG_DWORD", "00000001"
"ImagePath", "REG_EXPAND_SZ", "system32\drivers\Fbwf.sys"
"Group", "REG_SZ", "FSFilter System Recovery"
"DisplayName", "REG_SZ", ""
"DependOnService", "REG_MULTI_SZ", "FltMgr"
"DebugFlags", "REG_DWORD", "00000000"
"EnabledOnAllSkus", "REG_DWORD", "00000001"

$reg2 = "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\FBA"

"ProtectRegistryRamdisk", "REG_SZ", "\RegfData"
"EnablePostFBA", "REG_DWORD", "00000000"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\Instances"

"DefaultInstance", "REG_SZ", "Fbwf Instance"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\Enum"

"Altitude", "REG_SZ", "226000"
"Flags", "REG_DWORD", "00000000"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\FBA\Exclusion"

"0", "REG_SZ", "Root\LEGACY_FBWF\0000"
"Count", "REG_DWORD", "00000001"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF"

"NextInstance", "REG_DWORD", "00000001"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000"

"Service", "REG_SZ", "Fbwf"
"Legacy", "REG_DWORD", "00000001"
"ConfigFlags", "REG_DWORD", "00000032"
"Class", "REG_SZ", "LegacyDriver"
"ClassGUID", "REG_SZ", "{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc", "REG_SZ", "Fbwf"


"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000\Control"

"ActiveService", "REG_SZ", "Fbwf"



Hope that helps.

Does mean to turn of UAC logged in as admin?
Sorry, but I'm a newbie on this subject!

Nothing to do with the UAC Here,

This registry key has only read privileges to protect your OS. We need to insert some registry entries under that key so in Regedit right click the key in question and select permissions and then Everyone Group. Tick Full control and then add those keys I listed in the last post.

I don't recommend digging too much in there and If you get a bit overwhelmed it would be better get in contact again....

Like i said in the prevoious posts that RC 7100 was not tested. I won't be going back to make it work for that so if this doesn't work for you i would suggest get the Full version and give it a go on that. Windows 7 really is worth the purchase.

I hope that helps. Never be afraid to be a noob. Everyone is one sometime...

FBWF is working now :-))) Thanks a lot!

The script couldn't install FBWF completely due to missing permissions of [HKLM\SYSTEM\CurrentControlSet\ENUM\Root].

Most of you will know, how to solve that problem, but for me it was the first time to do that. So here is the solution for all the other newbies:
First I logged in as admin and started the registry editor (regedit). If I tried to change the permissions of "everyone" to "full access" for [HKLM\SYSTEM\CurrentControlSet\ENUM\Root] I got the error that it's not allowed for me. So first I had to change the owner under "advanced --> owners" to the admins name. Then I could change the permissions of "Everyone" to "full access". Now I was able to run the script completely. After finish I removed the changed settings in registry (for OS security).

FBWF now works fine for me... But there is still a small issue.
If FBWF is enabled and I restart the computer I got the (windows blackscreen with) a message, that windows was not shut down correctly and I should restart in safe mode. I think it's caused by the missing write access during the shutdown?! Is there a solution as well? Maybe to exclude any windows folders from fbwf?
Thanks in advance again!

Edit: The Solution...
The command ' bcdedit /set {default} bootstatuspolicy ignoreallfailures' in cmd as admin will prevent the error message during boot. For reset you can type 'bcdedit /set {default} bootstatuspolicy displayallfailures' in cmd.