Write Error with Disk Cloning in Fore... Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Support Forum » Disk Tools » Write Error with Disk Cloning in Forensics 14.5 « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

Mike Cronin
Username: mikec

Registered: N/A
Posted on Friday, Jun 27, 2008 - 19:37:   

Folks,
I'm trying to use 'Clone Disk' between two USB attached hard drives. Each has a primary partition of 10Gig (NTFS) that I wish to clone, one to the other. Each partition (source & destination) is assigned a drive letter, and I'm using Vista with UAC disabled. I have verified that I can write the destination using Vista. When I attempt to use Forensic v14.5 'Disk Clone' and specify the source and desination logical drives, I receive an "Error 21" which states:
"Cannot write to Drive Y:. Access is denied."

Can someone advise?

Thanks and regards
--Mike Cronin
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Saturday, Jun 28, 2008 - 16:01:   

I recommend removing the drive letter from the destination partition so that Vista does not protect it as much any more. Then you open the destination hard disk in WinHex or X-Ways Forensics and from there open the destination partition and specify that as the destination for cloning.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Saturday, Jun 28, 2008 - 16:02:   

Overwriting an NTFS volume that is still mounted is not something I would recommend anyway because of the buffer that Windows keeps for such volumes.
Top of pagePrevious messageNext messageBottom of page Link to this message

Mike Cronin
Username: mikec

Registered: N/A
Posted on Sunday, Jun 29, 2008 - 2:02:   

Stefan,
Thank you for your responses.

* I did try your first recommendation, but it did not work. However, your recommendation led me to wonder about Vista. and I have discovered the issue to be with the OS. I tried the same task with another machine in our lab that has XP instead, and the clone is successful.

* Your second post about overwriting a mounted NTFS volume is interesting. Can you expand a bit on the why? The reason I was doing this was to replicate a laptop hard disk to a larger disk, and this 10Gig partition was the recovery partition. Should I be aware of something concerning the buffer?

Best Regards,
--Mike
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Sunday, Jun 29, 2008 - 14:00:   

Only that Windows buffers changes to a mounted NTFS volume and lazily writes the buffer to the disk.

Add Your Message Here
Post:
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have an account.
Password:
Options: Enable HTML code in message
Automatically activate URLs in message
Action:
Forum operated by X-Ways Software Technology AG.