Hp Write Filters; File-Based Write Filter; Using The File-Based Write Filter Command Line Control - HP 4410t Administrator's Reference Manual

2

HP Write Filters

The File-Based Write Filter (FBWF) and the Enhanced Write Filter (EWF) provides two distinct ways to
provide a secure environment for your computer by protecting it from unauthorized writes to storage
and file systems. FBWF operates at the file level and EWF operates at the sector level. Only one write
filter can be selected and active at one time.

File-Based Write Filter

The File-Based Write Filter (FBWF) provides a secure environment for your computer by protecting it
from undesired read and write access to write-sensitive or read-only storage. FBWF redirects all writes
targeted for protected volumes to a RAM cache called an overlay.
FBWF has only two states, enabled or disabled, and does not have an overlay volume. When FBWF is
disabled, all previous changes are lost.

Using the File-Based Write Filter command line control

CAUTION:
undesired usage of these commands.
Windows® Embedded includes the FBWF command line control. This control enables you to issue a
set of commands to the FBWF driver, report the status of each protected overlay, and report the format
of the overall FBWF configurations.
By including the FBWF configuration interface in your configuration and building it into your image, you
enable use of the FBWF command line control and the corresponding commands.
To use the FBWF command line control, follow these steps:
1. Select Start > Run.
2. Type CMD in the Open field to access the system DOS prompt.
3. Click OK.
4. Type fbwfmgr c:.
5. Press enter.
Terminal Administrators should use Microsoft® Windows NT® file security to prevent
File-Based Write Filter 11