Remote Usage of Write Filter



NWren
07-09-2005, 10:25 PM
Hey hey all,

So, I have a ulitliy that will allow me to excute command line prompts
from afar. Has/Does anyone have a way to toogle the write filter on & off
from afar?

Also, anyone use netdom? Im also trying to get it setup to place units
on our domain from afar also. Thanks in advance!

KM
07-09-2005, 10:25 PM
NWren,

> Hey hey all,
>
> So, I have a ulitliy that will allow me to excute command line
> prompts
> from afar. Has/Does anyone have a way to toogle the write filter on & off
> from afar?

Do you mean to execute ewfmgr remotely?
There is no remote version of the ewfmgr but you can definitely create your
own app to do the remote changes in EWF states if you use EWF API.

Another simple way would be using a tool like PsExec from sysinternals.com
to remotely launch your commands (ewfmgr ...)
Similar tools you will find in NT/2K/XP Resource Kits.

> Also, anyone use netdom? Im also trying to get it setup to place units
> on our domain from afar also. Thanks in advance!

http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1

KM

NWren
07-09-2005, 10:25 PM
Right on. Though, I have a ulitiy that lets me issue commands to the Embedded
toasters from afar. Im more looking to find out how people have been toogling
the write filter on & off. The best Ive found are the .bat files. To which,
Ive gotten it to turn off the write filter but not turn it back on. Thanks!

"KM" wrote:

> NWren,
>
> > Hey hey all,
> >
> > So, I have a ulitliy that will allow me to excute command line
> > prompts
> > from afar. Has/Does anyone have a way to toogle the write filter on & off
> > from afar?
>
> Do you mean to execute ewfmgr remotely?
> There is no remote version of the ewfmgr but you can definitely create your
> own app to do the remote changes in EWF states if you use EWF API.
>
> Another simple way would be using a tool like PsExec from sysinternals.com
> to remotely launch your commands (ewfmgr ...)
> Similar tools you will find in NT/2K/XP Resource Kits.
>
> > Also, anyone use netdom? Im also trying to get it setup to place units
> > on our domain from afar also. Thanks in advance!
>
> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
>
> KM
>
>
>

KM
07-09-2005, 10:25 PM
NWren,

I couldn't understand what exactly problem you are trying to fix.

You can toggle the EWF state with EWFMGR or EWF API or directly through registry with commit (EWF RAM REG only).You can set this up
with a .bat file, launch locally or remotely. You can turn on the filter as well as turn it off.

KM

> Right on. Though, I have a ulitiy that lets me issue commands to the Embedded
> toasters from afar. Im more looking to find out how people have been toogling
> the write filter on & off. The best Ive found are the .bat files. To which,
> Ive gotten it to turn off the write filter but not turn it back on. Thanks!
>
> "KM" wrote:
>
>> NWren,
>>
>> > Hey hey all,
>> >
>> > So, I have a ulitliy that will allow me to excute command line
>> > prompts
>> > from afar. Has/Does anyone have a way to toogle the write filter on & off
>> > from afar?
>>
>> Do you mean to execute ewfmgr remotely?
>> There is no remote version of the ewfmgr but you can definitely create your
>> own app to do the remote changes in EWF states if you use EWF API.
>>
>> Another simple way would be using a tool like PsExec from sysinternals.com
>> to remotely launch your commands (ewfmgr ...)
>> Similar tools you will find in NT/2K/XP Resource Kits.
>>
>> > Also, anyone use netdom? Im also trying to get it setup to place units
>> > on our domain from afar also. Thanks in advance!
>>
>> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
>>
>> KM
>>
>>
>>

NWren
07-09-2005, 10:25 PM
No, your spot on as for what Im looking for. My problem was I couldnt find
the way to toggle them on & off. As well, Im constrained to the command line.
Hence trying to use the .bat files. Though what do you mean a EWF RAM REG
only? Or more so the difference between it and a reg file. Thanks again for
all your help KM!

"KM" wrote:

> NWren,
>
> I couldn't understand what exactly problem you are trying to fix.
>
> You can toggle the EWF state with EWFMGR or EWF API or directly through registry with commit (EWF RAM REG only).You can set this up
> with a .bat file, launch locally or remotely. You can turn on the filter as well as turn it off.
>
> KM
>
> > Right on. Though, I have a ulitiy that lets me issue commands to the Embedded
> > toasters from afar. Im more looking to find out how people have been toogling
> > the write filter on & off. The best Ive found are the .bat files. To which,
> > Ive gotten it to turn off the write filter but not turn it back on. Thanks!
> >
> > "KM" wrote:
> >
> >> NWren,
> >>
> >> > Hey hey all,
> >> >
> >> > So, I have a ulitliy that will allow me to excute command line
> >> > prompts
> >> > from afar. Has/Does anyone have a way to toogle the write filter on & off
> >> > from afar?
> >>
> >> Do you mean to execute ewfmgr remotely?
> >> There is no remote version of the ewfmgr but you can definitely create your
> >> own app to do the remote changes in EWF states if you use EWF API.
> >>
> >> Another simple way would be using a tool like PsExec from sysinternals.com
> >> to remotely launch your commands (ewfmgr ...)
> >> Similar tools you will find in NT/2K/XP Resource Kits.
> >>
> >> > Also, anyone use netdom? Im also trying to get it setup to place units
> >> > on our domain from afar also. Thanks in advance!
> >>
> >> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
> >>
> >> KM
> >>
> >>
> >>
>
>
>

KM
07-09-2005, 10:25 PM
NWren,

> No, your spot on as for what Im looking for. My problem was I couldnt find
> the way to toggle them on & off. As well, Im constrained to the command
> line.
> Hence trying to use the .bat files. Though what do you mean a EWF RAM REG
> only?

I just meant that you can change the EWF state in registry (Enabled value
under a EWF key) and this will only work for EWF RAM Reg mode because it
keeps all the EWF settings in registry.

KM.

> Or more so the difference between it and a reg file. Thanks again for
> all your help KM!
>
> "KM" wrote:
>
>> NWren,
>>
>> I couldn't understand what exactly problem you are trying to fix.
>>
>> You can toggle the EWF state with EWFMGR or EWF API or directly through
>> registry with commit (EWF RAM REG only).You can set this up
>> with a .bat file, launch locally or remotely. You can turn on the filter
>> as well as turn it off.
>>
>> KM
>>
>> > Right on. Though, I have a ulitiy that lets me issue commands to the
>> > Embedded
>> > toasters from afar. Im more looking to find out how people have been
>> > toogling
>> > the write filter on & off. The best Ive found are the .bat files. To
>> > which,
>> > Ive gotten it to turn off the write filter but not turn it back on.
>> > Thanks!
>> >
>> > "KM" wrote:
>> >
>> >> NWren,
>> >>
>> >> > Hey hey all,
>> >> >
>> >> > So, I have a ulitliy that will allow me to excute command line
>> >> > prompts
>> >> > from afar. Has/Does anyone have a way to toogle the write filter on
>> >> > & off
>> >> > from afar?
>> >>
>> >> Do you mean to execute ewfmgr remotely?
>> >> There is no remote version of the ewfmgr but you can definitely create
>> >> your
>> >> own app to do the remote changes in EWF states if you use EWF API.
>> >>
>> >> Another simple way would be using a tool like PsExec from
>> >> sysinternals.com
>> >> to remotely launch your commands (ewfmgr ...)
>> >> Similar tools you will find in NT/2K/XP Resource Kits.
>> >>
>> >> > Also, anyone use netdom? Im also trying to get it setup to place
>> >> > units
>> >> > on our domain from afar also. Thanks in advance!
>> >>
>> >> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
>> >>
>> >> KM
>> >>
>> >>
>> >>
>>
>>
>>

NWren
07-09-2005, 10:25 PM
>
> I just meant that you can change the EWF state in registry (Enabled value
> under a EWF key) and this will only work for EWF RAM Reg mode because it
> keeps all the EWF settings in registry.
>
> KM.
>

Well, the part about changing the reg I understand. I was trying to
understand what exactly a EWF RAM reg was? Given your saying that would only
work for that type. It implies there are more then one type out there. So,
how does one tell if one has that kind? Or pershaps a better question is, how
does one tell what kind of EWF they have? Thanks again for all the help!


> > Or more so the difference between it and a reg file. Thanks again for
> > all your help KM!
> >
> > "KM" wrote:
> >
> >> NWren,
> >>
> >> I couldn't understand what exactly problem you are trying to fix.
> >>
> >> You can toggle the EWF state with EWFMGR or EWF API or directly through
> >> registry with commit (EWF RAM REG only).You can set this up
> >> with a .bat file, launch locally or remotely. You can turn on the filter
> >> as well as turn it off.
> >>
> >> KM
> >>
> >> > Right on. Though, I have a ulitiy that lets me issue commands to the
> >> > Embedded
> >> > toasters from afar. Im more looking to find out how people have been
> >> > toogling
> >> > the write filter on & off. The best Ive found are the .bat files. To
> >> > which,
> >> > Ive gotten it to turn off the write filter but not turn it back on.
> >> > Thanks!
> >> >
> >> > "KM" wrote:
> >> >
> >> >> NWren,
> >> >>
> >> >> > Hey hey all,
> >> >> >
> >> >> > So, I have a ulitliy that will allow me to excute command line
> >> >> > prompts
> >> >> > from afar. Has/Does anyone have a way to toogle the write filter on
> >> >> > & off
> >> >> > from afar?
> >> >>
> >> >> Do you mean to execute ewfmgr remotely?
> >> >> There is no remote version of the ewfmgr but you can definitely create
> >> >> your
> >> >> own app to do the remote changes in EWF states if you use EWF API.
> >> >>
> >> >> Another simple way would be using a tool like PsExec from
> >> >> sysinternals.com
> >> >> to remotely launch your commands (ewfmgr ...)
> >> >> Similar tools you will find in NT/2K/XP Resource Kits.
> >> >>
> >> >> > Also, anyone use netdom? Im also trying to get it setup to place
> >> >> > units
> >> >> > on our domain from afar also. Thanks in advance!
> >> >>
> >> >> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
> >> >>
> >> >> KM
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

KM
07-09-2005, 10:25 PM
NWren,

> Well, the part about changing the reg I understand. I was trying to
> understand what exactly a EWF RAM reg was? Given your saying that would
> only

http://msdn.microsoft.com/library/en-us/xpehelp/html/xegrfEWFRAMRegOverlays.asp

> work for that type. It implies there are more then one type out there. So,

http://msdn.microsoft.com/library/en-us/xpehelp/html/xeconOverlayTypes.asp

> how does one tell if one has that kind? Or pershaps a better question is,
> how
> does one tell what kind of EWF they have? Thanks again for all the help!

When you type ewfmgr (or ewfmgr <drive>:) it gives you some info about the
EWF mode.

KM

>> > Or more so the difference between it and a reg file. Thanks again for
>> > all your help KM!
>> >
>> > "KM" wrote:
>> >
>> >> NWren,
>> >>
>> >> I couldn't understand what exactly problem you are trying to fix.
>> >>
>> >> You can toggle the EWF state with EWFMGR or EWF API or directly
>> >> through
>> >> registry with commit (EWF RAM REG only).You can set this up
>> >> with a .bat file, launch locally or remotely. You can turn on the
>> >> filter
>> >> as well as turn it off.
>> >>
>> >> KM
>> >>
>> >> > Right on. Though, I have a ulitiy that lets me issue commands to the
>> >> > Embedded
>> >> > toasters from afar. Im more looking to find out how people have been
>> >> > toogling
>> >> > the write filter on & off. The best Ive found are the .bat files. To
>> >> > which,
>> >> > Ive gotten it to turn off the write filter but not turn it back on.
>> >> > Thanks!
>> >> >
>> >> > "KM" wrote:
>> >> >
>> >> >> NWren,
>> >> >>
>> >> >> > Hey hey all,
>> >> >> >
>> >> >> > So, I have a ulitliy that will allow me to excute command
>> >> >> > line
>> >> >> > prompts
>> >> >> > from afar. Has/Does anyone have a way to toogle the write filter
>> >> >> > on
>> >> >> > & off
>> >> >> > from afar?
>> >> >>
>> >> >> Do you mean to execute ewfmgr remotely?
>> >> >> There is no remote version of the ewfmgr but you can definitely
>> >> >> create
>> >> >> your
>> >> >> own app to do the remote changes in EWF states if you use EWF API.
>> >> >>
>> >> >> Another simple way would be using a tool like PsExec from
>> >> >> sysinternals.com
>> >> >> to remotely launch your commands (ewfmgr ...)
>> >> >> Similar tools you will find in NT/2K/XP Resource Kits.
>> >> >>
>> >> >> > Also, anyone use netdom? Im also trying to get it setup to
>> >> >> > place
>> >> >> > units
>> >> >> > on our domain from afar also. Thanks in advance!
>> >> >>
>> >> >> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
>> >> >>
>> >> >> KM
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

Slobodan Brcin \(eMVP\)
07-09-2005, 10:25 PM
You have one driver that is universal, but it can be configured in different ways and based on that it will do different things, or
things differenttly.

During the boot driver read configuration parameters from small hidden partition on your HDD (If it exist of course).
In case that there is no config partition driver will load setting from some fixed registry path, this mode work only for RAM EWF,
and we call it "Reg RAM EWF".

If EWF is configured trough partition on disk it can work in RAM or DISK EWF mode. RAM mode uses only few bytes of configuration
just to see if EWF should be enabled or disabled for specific volumes.
In disk mode this hidden partition will become storage for EWF ovelays and it will present you with different way to use EWF.

Regards,
Slobodan




"KM" <konstmor@nospam_yahoo.com> wrote in message news:e5YgkajYFHA.3220@TK2MSFTNGP14.phx.gbl...
> NWren,
>
> > Well, the part about changing the reg I understand. I was trying to
> > understand what exactly a EWF RAM reg was? Given your saying that would
> > only
>
> http://msdn.microsoft.com/library/en-us/xpehelp/html/xegrfEWFRAMRegOverlays.asp
>
> > work for that type. It implies there are more then one type out there. So,
>
> http://msdn.microsoft.com/library/en-us/xpehelp/html/xeconOverlayTypes.asp
>
> > how does one tell if one has that kind? Or pershaps a better question is,
> > how
> > does one tell what kind of EWF they have? Thanks again for all the help!
>
> When you type ewfmgr (or ewfmgr <drive>:) it gives you some info about the
> EWF mode.
>
> KM
>
> >> > Or more so the difference between it and a reg file. Thanks again for
> >> > all your help KM!
> >> >
> >> > "KM" wrote:
> >> >
> >> >> NWren,
> >> >>
> >> >> I couldn't understand what exactly problem you are trying to fix.
> >> >>
> >> >> You can toggle the EWF state with EWFMGR or EWF API or directly
> >> >> through
> >> >> registry with commit (EWF RAM REG only).You can set this up
> >> >> with a .bat file, launch locally or remotely. You can turn on the
> >> >> filter
> >> >> as well as turn it off.
> >> >>
> >> >> KM
> >> >>
> >> >> > Right on. Though, I have a ulitiy that lets me issue commands to the
> >> >> > Embedded
> >> >> > toasters from afar. Im more looking to find out how people have been
> >> >> > toogling
> >> >> > the write filter on & off. The best Ive found are the .bat files. To
> >> >> > which,
> >> >> > Ive gotten it to turn off the write filter but not turn it back on.
> >> >> > Thanks!
> >> >> >
> >> >> > "KM" wrote:
> >> >> >
> >> >> >> NWren,
> >> >> >>
> >> >> >> > Hey hey all,
> >> >> >> >
> >> >> >> > So, I have a ulitliy that will allow me to excute command
> >> >> >> > line
> >> >> >> > prompts
> >> >> >> > from afar. Has/Does anyone have a way to toogle the write filter
> >> >> >> > on
> >> >> >> > & off
> >> >> >> > from afar?
> >> >> >>
> >> >> >> Do you mean to execute ewfmgr remotely?
> >> >> >> There is no remote version of the ewfmgr but you can definitely
> >> >> >> create
> >> >> >> your
> >> >> >> own app to do the remote changes in EWF states if you use EWF API.
> >> >> >>
> >> >> >> Another simple way would be using a tool like PsExec from
> >> >> >> sysinternals.com
> >> >> >> to remotely launch your commands (ewfmgr ...)
> >> >> >> Similar tools you will find in NT/2K/XP Resource Kits.
> >> >> >>
> >> >> >> > Also, anyone use netdom? Im also trying to get it setup to
> >> >> >> > place
> >> >> >> > units
> >> >> >> > on our domain from afar also. Thanks in advance!
> >> >> >>
> >> >> >>
http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
> >> >> >>
> >> >> >> KM
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>

Stefan Fikar
07-09-2005, 10:25 PM
maybe ewfmgr c: -enable
respectively
ewfmgr c: -disable
[ewfmgr /?]

is just what he was looking for ;)

Regards,
Stefan Fikar


"Slobodan Brcin (eMVP)" schrieb:

> You have one driver that is universal, but it can be configured in different ways and based on that it will do different things, or
> things differenttly.
>
> During the boot driver read configuration parameters from small hidden partition on your HDD (If it exist of course).
> In case that there is no config partition driver will load setting from some fixed registry path, this mode work only for RAM EWF,
> and we call it "Reg RAM EWF".
>
> If EWF is configured trough partition on disk it can work in RAM or DISK EWF mode. RAM mode uses only few bytes of configuration
> just to see if EWF should be enabled or disabled for specific volumes.
> In disk mode this hidden partition will become storage for EWF ovelays and it will present you with different way to use EWF.
>
> Regards,
> Slobodan
>
>
>
>
> "KM" <konstmor@nospam_yahoo.com> wrote in message news:e5YgkajYFHA.3220@TK2MSFTNGP14.phx.gbl...
> > NWren,
> >
> > > Well, the part about changing the reg I understand. I was trying to
> > > understand what exactly a EWF RAM reg was? Given your saying that would
> > > only
> >
> > http://msdn.microsoft.com/library/en-us/xpehelp/html/xegrfEWFRAMRegOverlays.asp
> >
> > > work for that type. It implies there are more then one type out there. So,
> >
> > http://msdn.microsoft.com/library/en-us/xpehelp/html/xeconOverlayTypes.asp
> >
> > > how does one tell if one has that kind? Or pershaps a better question is,
> > > how
> > > does one tell what kind of EWF they have? Thanks again for all the help!
> >
> > When you type ewfmgr (or ewfmgr <drive>:) it gives you some info about the
> > EWF mode.
> >
> > KM
> >
> > >> > Or more so the difference between it and a reg file. Thanks again for
> > >> > all your help KM!
> > >> >
> > >> > "KM" wrote:
> > >> >
> > >> >> NWren,
> > >> >>
> > >> >> I couldn't understand what exactly problem you are trying to fix.
> > >> >>
> > >> >> You can toggle the EWF state with EWFMGR or EWF API or directly
> > >> >> through
> > >> >> registry with commit (EWF RAM REG only).You can set this up
> > >> >> with a .bat file, launch locally or remotely. You can turn on the
> > >> >> filter
> > >> >> as well as turn it off.
> > >> >>
> > >> >> KM
> > >> >>
> > >> >> > Right on. Though, I have a ulitiy that lets me issue commands to the
> > >> >> > Embedded
> > >> >> > toasters from afar. Im more looking to find out how people have been
> > >> >> > toogling
> > >> >> > the write filter on & off. The best Ive found are the .bat files. To
> > >> >> > which,
> > >> >> > Ive gotten it to turn off the write filter but not turn it back on.
> > >> >> > Thanks!
> > >> >> >
> > >> >> > "KM" wrote:
> > >> >> >
> > >> >> >> NWren,
> > >> >> >>
> > >> >> >> > Hey hey all,
> > >> >> >> >
> > >> >> >> > So, I have a ulitliy that will allow me to excute command
> > >> >> >> > line
> > >> >> >> > prompts
> > >> >> >> > from afar. Has/Does anyone have a way to toogle the write filter
> > >> >> >> > on
> > >> >> >> > & off
> > >> >> >> > from afar?
> > >> >> >>
> > >> >> >> Do you mean to execute ewfmgr remotely?
> > >> >> >> There is no remote version of the ewfmgr but you can definitely
> > >> >> >> create
> > >> >> >> your
> > >> >> >> own app to do the remote changes in EWF states if you use EWF API.
> > >> >> >>
> > >> >> >> Another simple way would be using a tool like PsExec from
> > >> >> >> sysinternals.com
> > >> >> >> to remotely launch your commands (ewfmgr ...)
> > >> >> >> Similar tools you will find in NT/2K/XP Resource Kits.
> > >> >> >>
> > >> >> >> > Also, anyone use netdom? Im also trying to get it setup to
> > >> >> >> > place
> > >> >> >> > units
> > >> >> >> > on our domain from afar also. Thanks in advance!
> > >> >> >>
> > >> >> >>
> http://groups-beta.google.com/group/microsoft.public.windowsxp.embedded/search?hl=en&group=microsoft.public.windowsxp.embedded&q=netdom&qt_g=1
> > >> >> >>
> > >> >> >> KM
> > >> >> >>
> > >> >> >>
> > >> >> >>
> > >> >>
> > >> >>
> > >> >>
> > >>
> > >>
> > >>
> >
> >
>
>
>


Remote Usage of Write Filter