0

On a PC that has Windows NT4 Embedded, WriteFilter is activated. All the changes I make to C: partition are reverted after a reboot.

HKLM\SYSTEM\ControlSet001\Services\wfilter is set to "0"

I have tried below method from here, but I got "File is already open" error when I try to load hive:

Open Regedt32, select HKEY_LOCAL_MACHINE, then "File -> Load Hive", select the \winnt\system32\config\SYSTEM file on the NTe partition, name the hive "a" and then go to HKLM\a\ControlSet001\Services\wfilter. Double click on "Start" in the right pane, change the value to "4".

Select "a" again, "File -> Unload Hive" and reboot into NTe. If everything went okay, the write filter should now be disabled. You can test that by creating a text file on the desktop and rebooting. It should still be there.

How do I disable Write Filter on a system that has write filter enabled?

abdullah kahraman
  • 109
  • 2

1 Answers1

0

I have solved it by following procedure:

  • Open the WinNT4 medium (CF-card in my case) on an another host windows machine.
  • Open Regedt32, select HKEY_LOCAL_MACHINE, then "File -> Load Hive", select the \winnt\system32\config\SYSTEM file on the NTe partition, name the hive "a" and then go to HKLM\a\ControlSet001\Services\wfilter. Double click on "Start" in the right pane, change the value to "4".
  • Select "a" again, "File -> Unload Hive"
abdullah kahraman
  • 109
  • 2