Enhanced Write Filter API
The Enhanced Write Filter (EWF) application programming interface (API) exposes a set of functions that allow an application to interact with EWF.
To enable support for the Enhanced Write Filter API, add the Enhanced Write Filter API component to your run-time image.
EWF is used to protect one or more disk volumes by intercepting write requests to the volume and redirecting them to an overlay volume. The overlay storage is either RAM or another disk.
The EWF API functions enable applications to query and modify EWF configuration settings for protected volumes. The following list shows the typical usage scenarios for these functions:
- Disabling/enabling EWF for a protected volume
- Restoring or discarding an overlay level
- Creating a checkpoint by adding an overlay level
- Committing the current overlay
- Persisting data through a reboot
- Enabeling Hibernate Once Resume Many (HORM).
EWF Configuration Settings
Typically, configuration settings for EWF are stored in the EWF volume. For RAM Reg EWF mode, an EWF volume store may not exist as a physical disk volume. For these configurations, all overlay configuration data is stored and retrieved from the registry.
The following list shows the two primary configuration structures that the EWF API exposes:
EWF API Considerations
The following list shows information that is important to consider before you use the API:
- Many of the EWF functions do not take effect until the system restarts. Review the function documentation to ensure that you understand the expected behavior.
- EWF offers functions to get and set persistent data. These functions are useful to persist data through a reboot.
- Devices without a volume store can only disable EWF by committing the current RAM overlay to the protected volume at the same time.
See Also
EWF API Functions | EWF API Structures | EWF API Code Sample
Last updated on Wednesday, October 18, 2006
© 2006 Microsoft Corporation. All rights reserved.