EwfMgrDisable

Article
10/07/2008

This function disables a currently enabled overlay on the specified volume, committing the current level if fCommit is TRUE, and discarding all overlays if fCommit is FALSE.

  BOOL EwfMgrDisable(
    HANDLE 
  hDevice,
  BOOLfCommit);

Parameters

hDevice
[in] Handle to the EWF-protected volume.
fCommit
[in] If TRUE, the current overlay is committed before the protection is disabled. If FALSE, all overlays are discarded and protection is disabled.

Return Values

If the function succeeds, the return value is TRUE. If the function fails, the return value is FALSE. Call GetLastError for extended error information.

Remarks

The overlay is disabled on the next restart.

This function is supported on both disk and RAM overlays. However, on a RAM overlay that does not have an associated EWF overlay store keeping track of its protection settings (that is, registry-described RAM overlays), the fCommit flag must be set to TRUE, or the disable fails.

Requirements

OS Versions: Windows XP Embedded.
Header: Ewfapi.h.
Link Library: Ewfapi.dll, Ewfapi.lib.

Code Example

The following routine(s), which are included in the EWF API Code Sample (Sample.cpp), demonstrate how to use this function:

DoEwfDisable