Hi,
I have a problem with a bad Windows 7 embedded image. The FBWF, EWF and regfilter were all thought to be disabled however the regfilter service is still started and recording data from the protected zones.
Since SEP 12.1.6 introduced embedded write filter handling, we experience issues of lost registry data that does not get committed after reboot. The missing data is for the Teefer2 driver that SEP install creates exception for in regfilter under hklm\system\currentcontrolset\services\regfilter\parameters\monitoredkeys\_symcsepexclusion5.
I am looking for a way to install SEP using the secure properties to remove checks for FBWR,EWF and regfilter or to find out what the SEP installer is looking at to determine that and filters are installed.
The long run we will be deploying a new SOE with the filters correctly removed, this is not an option just yet and having our thin clients randomly lose network and need manual remediation is becoming a pain to manage.
regards
Cameron