Requirements
- Windows XP based operating system.
- Administrative rights to install and run ewf.
EWF is a component of XPe (XP Embedded), but it can be manually installed on Windows XP.
1. Extract the attached file to a known location on your PC.
2. Copy ewf.sys to the %systemroot%\system32\drivers\ directory.
3. Copy ewfmgr.exe to the %systemroot\%system32\ directory.
4. Copy and rename ewfntldr to the %systemroot% directory (rename it to ntldr). It will ask you to overwrite the existing file. I would recommend backing up the original before doing this.
5. Open regedit.exe and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root.
6. Right-click on Root and click ‘Permissions’. Set ‘Everyone’ to have Full Control.
7. Edit EWFreg.reg by right-clicking on it and selecting 'Edit'.
8. Edit ArcName (very last line of the file) and change it to your configuration.
9. Once you have edited the EWFreg.reg merge it by double clicking on it.
If you do not know what your ArcName should be, you can check your boot.ini file for this information. Also if you wish you can change back the registry permissions you changed in step 5, just make sure to disable EWF before you do, or the changes will be lost when you restart.