EWF errata
#1. In the Help documentation released with XPe SP2 and on the MSDN web page there is a typo in the section called “Configuring EWF RAM Reg Mode” that may be causing some confusion. The user is instructed to add a number of registry keys, however one of these has a trailing period that should not be there, specifically:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}.
That trailing period '.' should not be included since it will cause the UpperFilters value to be stored in an incorrect location.
#2. Other document updates include a change to “EWF Manager Commands”. The comment:
“The -live command is supported on EWF RAM mode only.”
should instead read:
“Live commit and disable is not supported for disk overlay.”
Expect to see an SP2 document refresh posted to the web sometime in May.
- Lynda