WES 7 Enhanced write filter with HORM

From ICE to add "Enhanced Write Filter with HORM".



Choose "Specialize" from "Filter view by:"

Insert New Volume from "ProtectedVolumes".

Add Key value to "1", Disknumber value to "0", PartitionNumber value to "1".








Hibernate setting, from command mode,

c:\windows\system32>powercfg -h on

To let "Hibernate" pop out "Start". -- From Control Panel -->Power Options -->Edit Plan Setting -->Change advanced power settings -->Sleep -->Change "Allow Hybrid sleep Setting" to "Off".


From command prompt, to activate HORM and enable EWF.

c:\windows\system32>ewfmgr c: -activatehorm

c:\windows\system32>ewfmgr c: -enable ---> reboot the system




From "start" to choose "Hibernate" and shut down the system. At this moment, HORM is activated.


From command prompt, to disable EWF & deactivate HORM

c:\windows\system32>ewfmgr c: -commitanddisable ---> reboot

c:\windows\system32>ewfmgr c: -deactivatehorm