EWF Tool Version 1.0 BETA
=========================


Description
-----------

This tool helps install and configure the Enhanced Write Filter driver and it's associated tools.  This tool ONLY works with Windows XP Home, Windows XP Professional, or Media Center Edition 2005.


IMPORTANT NOTES
---------------

This package DOES NOT INCLUDE the actual filter driver files!  Due to copyright restrictions, distribution of the EWF driver files with this package is not possible, so you must therefore obtain the files yourself.  See the section below for how to obtain the driver files.


Obtaining the EWF Drivers
-------------------------

You can get the files you require from the Windows XP Embedded SP2 Trial, which is available for download from the following site:

  http://www.microsoft.com/windows/embedded/eval/default.mspx

When you install the evaluation software, it will create a new folder called Repositories.  Search the Repositories folder for the following three files:

  ewf.sys
  ewfmgr.exe
  ewfntldr

The Repositories folder contains multiple versions of the files, so you must make sure you get the newest versions of the files (version 2.0.927.0 or above).  Simply copy the correct files to the same directory as the EWFTool (the program included in this package) and then run EWFTool.


Warning!
--------

This tool makes some fairly low level changes to your system, including replacing your ntldr boot loader, and installing low level filter drivers.  If anything goes wrong, your system could be left in a state where you are no longer able to boot.  You should make a full backup of your system, and have a boot disk ready just in case.  I recommend using using BartPE to create a recovery boot CD, especially if you are using the NTFS file system:

  http://www.nu2.nu/pebuilder/


Frequently Asked Questions
--------------------------

Q) What is the EWF driver?
A) The Enhanced Write Filter is a low level driver which prevents all disk write operations.  Writes are transparently intercepted by the EWF driver and temporarily stored in RAM instead.

Q) Why would I want to use the EWF driver?
A) The main reason for running the EWF driver is to protect your Compact Flash card or solid state disk from being written to too many times.  These types of media have limited numbers of write cycles, and running Windows from any of these types of media can quickly wear them out.

Q) Where can I get the EWF driver files?
A) See the "Obtaining the EWF Drivers" section above.

Q) Why aren't the EWF driver files just included in the package?
A) Unfortunately, the driver files can't be distributed with this package for copyright reasons.

Q) What is HORM?
A) HORM stand for Hibernate Once Resume Many.  It is very similar to normal hibernation, except with HORM enabled, Windows resumes from the same hibernation file each time you start your computer.

Q) Can you email me the EWF Driver files?
A) Sorry, I'm afraid I can't do that.  You must obtain the files youself.

Q) My system no longer boots!
A) During the EWF installation process, the ntldr file in the root directory of your system partition is replaced with the EWF version.  Try booting from a boot disk and then delete ntldr and then restore your original version by renaming the file ntldr.bak as ntldr.


Version History
---------------

Version 1.0 BETA - First public beta release.


Acknowledgements
----------------

This tool was only made possible thanks to the amazing work of Silvio Fiorito who figured out how to get the EWF driver working on a standard XP installation.  This tool is based on the guide lines detailed on Silvio's "Embedding Windows XP" page:

  http://mason.gmu.edu/~sfiorito/eXPinstall.htm


Legal Stuff
-----------

This software distributed strictly on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or implied.  Use it entirely at YOUR OWN RISK!


Contact
-------

If you think you have found a bug or have any comments or suggestions regarding the EWF Tool, you can get in touch here:

  danieldsmith@hotmail.com