79462849

Date: 2025-02-24 08:34:13
Score: 2
Natty:
Report link

Your approach using SAN policy 3 is a solid start to prevent automatic mounting and writing. However, for bypassing the critical disk restriction, you might need to use a lower-level filter driver or modify WinPE’s boot configuration to prevent Windows from treating the disk as critical. Have you explored using StorPort mini-filters or modifying registry settings in the PE environment before mounting? Also, setting the disk as read-only in the startnet.cmd script should prevent accidental writes, but testing with ProcMon could confirm if anything slips through. Let us know if you find a foolproof method.

Reasons:
  • Long answer (-0.5):
  • No code block (0.5):
  • Contains question mark (0.5):
  • Single line (0.5):
  • Low reputation (1):
Posted by: Astrologer Sharma