EWF_VOLUME_CONFIG
5/10/2007
This read-only structure contains configuration information about an Enhanced Write Filter (EWF)-protected volume.
Syntax
typedef struct _EWF_VOLUME_CONFIG
{
EWF_TYPE Type;
EWF_STATE State;
EWF_COMMAND BootCommand;
UCHAR PersistentData[EWF_MAX_PERSISTENT_DATA];
USHORT MaxLevels;
ULONG ClumpSize;
USHORT CurrentLevel;
union
{
struct
{
LONGLONG DiskMapSize;
LONGLONG DiskDataSize;
} DiskOverlay;
struct
{
LONGLONG RamDataSize;
} RamOverlay;
};
ULONG MemMapSize;
EWF_VOLUME_DESC VolumeDesc;
EWF_LEVEL_DESC LevelDescArray[1];
} EWF_VOLUME_CONFIG, * PEWF_VOLUME_CONFIG;
Members
- Type
Specifies the type of overlay for this volume: RAM, registry-described RAM, or disk.
- State
Specifies the state of the overlay for this volume. The state can be either enabled or disabled.
- BootCommand
Specifies a command to be executed on restart.
- PersistentData
Data that survives disable, enable, and restore operations. Persistent data size is EWF_MAX_PERSISTENT_DATA (32 bytes by default).
- MaxLevels
Maximum number of checkpoint levels in the overlay.
- ClumpSize
Size of the clumps, in bytes. ClumpSize must be 512 bytes.
- CurrentLevel
Current checkpoint level.
- DiskMapSize
Size of the mapping data that is contained on disk for the protected volume, in bytes (only for disk overlays).
- DiskDataSize
Size of the data to be stored on disk for the protected volume, in bytes (only for disk overlays).
- RamDataSize
Size of the data to be stored in RAM for the protected volume, in bytes (only for RAM overlays).
- MemMapSize
Size of the mapping data that is contained in memory for the protected volume, in bytes.
- VolumeDesc
Volume device name and volume ID.
- LevelDescArray
Level description and end time, and level data size. Number of entries is specified by MaxLevels.
Requirements
OS Versions: Windows XP Embedded.
Header: Ewfapi.h.
Link Library: Ewfapi.dll, Ewfapi.lib.
See Also
Reference
EwfMgrGetProtectedVolumeConfig