File Based Write Filter (FBWF) for win 7 from embedded

Hi

I used to use EWF (enhanced write filter) for an XP system running off a CF disk, it was brilliantly quick.

Now, I want to try the same with Windows 7, which if installed without write filter, is impossibly slow to use. I've downloaded the latest Windows Embedded Standard based on Win 7, which contains a new version of the File Based Write Filter.

Does anyone know if there's an easy way to install FBWF from the downloaded Embedded version in to a pre-existing Win7 installation?

Many thanks.

Hi,

Trying to acheive this as well. If you are still around, I would love to get the files you have from the Embedded OS you have. Microsoft Steady state installs on windows 7 but failes at installing the driver necessary to make the FBFW go active.

It creates the cache.wdp but when you try to enable it it deletes it. I tried manually to install the vcf.inf that comes with SteadyState but it failes. My hunch is maybe with the files you have we might be able to get the process to work.

PM me if you want to pursue. I will Post the directions if successful.

Cheers

@hispeedmike

Can you explain how to get it working?
I tried to install the file above at Win7 RC 1 (build 7100). Logged in as admin and turned off the UAC I executed the "FBWF Setup.exe" file. Then I choosed the Win7 button and Start. After completed installation, a reboot and execute "fbwfmgr /enable" at the CMD there comes the message:

"FbwfMgr: Unable to communicate with the file-based write filter."

What's the issue during installation? Should I install it with XP compatibility mode.
Thanks for your answer in advance...

One thing I noticed when I wen to install it on a clean box was the sysinternals app I use to get access to the registry to write the files requires you to accept the license. That little pause causes the script to exit and not complete.

Run it again and the license does not need to be accepted and it worked fine for me.

Hope this works, just post back here if it works or not...

Cheers

@hispeedmike

Unfortunately I've no chance any more to get the fbwf working with the script! No matter if I start the script as normal user, as admin or in compatibility mode, everytime I get the same error...
Please could you post the registry settings, I would like to try it manually. Afaik I have to copy the files in the win7 folder into my matching windows folder, edit the registry and reboot the system?

Thanks in advance!

first step is to Allow Everyone full access to the:
HKLM\SYSTEM\CurrentControlSet\ENUM\Root]\

Under the following Keys inject the Required Values:

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF

"Start", "REG_DWORD", "00000000"
"Type", "REG_DWORD", "00000002"
"ErrorControl", "REG_DWORD", "00000001"
"ImagePath", "REG_EXPAND_SZ", "system32\drivers\Fbwf.sys"
"Group", "REG_SZ", "FSFilter System Recovery"
"DisplayName", "REG_SZ", ""
"DependOnService", "REG_MULTI_SZ", "FltMgr"
"DebugFlags", "REG_DWORD", "00000000"
"EnabledOnAllSkus", "REG_DWORD", "00000001"

$reg2 = "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\FBA"

"ProtectRegistryRamdisk", "REG_SZ", "\RegfData"
"EnablePostFBA", "REG_DWORD", "00000000"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\Instances"

"DefaultInstance", "REG_SZ", "Fbwf Instance"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\Enum"

"Altitude", "REG_SZ", "226000"
"Flags", "REG_DWORD", "00000000"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FBWF\FBA\Exclusion"

"0", "REG_SZ", "Root\LEGACY_FBWF\0000"
"Count", "REG_DWORD", "00000001"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF"

"NextInstance", "REG_DWORD", "00000001"

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000"

"Service", "REG_SZ", "Fbwf"
"Legacy", "REG_DWORD", "00000001"
"ConfigFlags", "REG_DWORD", "00000032"
"Class", "REG_SZ", "LegacyDriver"
"ClassGUID", "REG_SZ", "{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc", "REG_SZ", "Fbwf"


"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FBWF\0000\Control"

"ActiveService", "REG_SZ", "Fbwf"



Hope that helps.

Nothing to do with the UAC Here,

This registry key has only read privileges to protect your OS. We need to insert some registry entries under that key so in Regedit right click the key in question and select permissions and then Everyone Group. Tick Full control and then add those keys I listed in the last post.

I don't recommend digging too much in there and If you get a bit overwhelmed it would be better get in contact again....

Like i said in the prevoious posts that RC 7100 was not tested. I won't be going back to make it work for that so if this doesn't work for you i would suggest get the Full version and give it a go on that. Windows 7 really is worth the purchase.

I hope that helps. Never be afraid to be a noob. Everyone is one sometime...