Microsoft Windows PE

from Wikipedia, the free encyclopedia
Windows PE
developer Microsoft
License (s) Freeware
Current  version 10.0.15063.0 (May 2, 2017)
Kernel Hybrid kernel

Microsoft Windows PE ( PE stands for Preinstallation Environment , English for pre- installation environment ; also briefly WinPE called) is a minimized Windows - operating system . It is based on Windows XP and its successors (up to and including Windows 10 ) and can be of different bootable storage media (such as CD-ROM , USB flash drive or hard drive ) to boot .

development

The following versions are now available on the market:

  • Windows PE 1.0 was the first version released by Microsoft . It was based on Windows XP . After a short time, all information about it was removed from the Microsoft homepage, because Windows PE could bypass the entire NTFS security guidelines.
  • Windows PE 1.1 followed a short time later. Starting with the Windows Recovery Console was no longer officially supported as of this version. This version is still based on Windows XP or Windows XP SP1.
  • Windows PE 1.2 had extended API support and a complete VBScript environment. This version was based on Windows XP, Windows XP SP1 or Windows Server 2003 .

With the following versions, Microsoft took a step in a completely new direction and, in addition to the version numbers, also changed the licensing model in order to allow resellers to pass on Windows PE directly to customers on the supplied CDs:

  • For the first time, Windows PE 2004 (1.5) was only based on Windows XP SP2. This version added PnP driver support and WMI functions.
  • Windows PE 2005 (1.6) also supports PXE boot environments from other manufacturers. Extended RAM disk support was added, in which the entire CD is loaded into RAM . This enables the CD to be removed on the fly. The 2005 version is based on Windows XP SP2 and Windows Server 2003 .
  • Windows PE 2.0 is based on Windows Vista and is part of the Windows Automated Installation Kit 1.0 for Windows Vista and can be downloaded free of charge (see also web links ).
  • Windows PE 2.1 is part of the Windows Automated Installation Kit 1.1 for Windows Vista SP1 and Windows Server 2008 and can also be downloaded free of charge (see also web links ).
  • Windows PE 3.0 is based on Windows 7 and is part of the Windows Automated Installation Kit for Windows 7 and can be downloaded free of charge (see also web links ).
  • Windows PE 3.1 is based on Windows 7 SP1 and is part of the supplement to the Windows Automated Installation Kit (AIK) for Windows 7 SP1 .
  • Windows PE 4.0 is based on Windows 8 and is part of the supplement to the Windows Assessment and Deployment Kit (ADK) (Windows Kits 8.0) .
  • Windows PE 5.0 is based on Windows 8.1 and is part of the supplement to the Windows ADK (Windows Kits 8.1) .
  • Windows PE 5.1 is based on Windows 8.1 Up1 and is required by updating Windows PE 5.0 for WimBoot. Not yet integrated into an ADK.
  • Windows PE 10.0.10586 is based on Windows 10 Version 1511 and is part of the Assessment and Deployment Kit (ADK) for Windows 10 Version 1511 and can be downloaded free of charge (see also web links ).
  • Windows PE 10.0.14393 is based on Windows 10 Version 1607 and is part of the Assessment and Deployment Kit (ADK) for Windows 10 Version 1607 and can be downloaded free of charge (see also web links ).
  • Windows PE 10.0.15063.0 is based on Windows 10 Version 1703 and is part of the Assessment and Deployment Kit (ADK) for Windows 10 Version 1703 and can be downloaded free of charge (see also web links ).
  • Windows PE 10.0.17134.1 is based on Windows 10 Version 1803 and is part of the Assessment and Deployment Kit (ADK) for Windows 10 Version 1803 and can be downloaded free of charge (see also web links ).
  • Windows PE 10.0.18362.1 is based on Windows 10 Version 1903 and is part of the Assessment and Deployment Kit (ADK) for Windows 10 Version 1903 and can be downloaded free of charge (see also web links ).

options

Windows PE is primarily intended for computer manufacturers and administrators . It is intended to enable the fully automatic installation of a Windows system on a new computer on which no operating system has yet been installed.

Windows PE offers a simple command line interpreter and only requires about 512 megabytes of RAM. After starting z. B. partitioning and formatting hard disks or connecting network drives from which a Windows installation can then be started.

More options

Modification of Windows Forensic Environment

By modifying a few registry entries, a modification of Windows PE that can be used for auditing and IT forensic investigations, the so-called WinFE (for Windows Forensic Environment), should be created. The modification prevents the usual and automatic integration of built-in storage media (e.g. a hard disk drive) and thus prevents the writing of any data (e.g. the time of the last read access to data).

So far, however, there has been a lack of tests that have been carried out on a well-founded, empirical database that prove the (IT forensic) functionality of WinFE. Users of this modification are recommended to carry out appropriate tests themselves before using WinFE.

Features not supported

In the following, functions are listed which are supported in normal Windows versions, but are not or are no longer included in Windows PE .

  • Partly missing API components:
    • Access Control
    • Active Directory Services Interfaces (ADSI)
    • DirectX
    • NetShow Theater Administration
    • OpenGL
    • Power Options
    • Print and Print Queue (Printing and Print Spooler)
    • Still image
    • Tape backup
    • Terminal Services
    • User Profiles
    • Workstation (Window Station) and Desktop
    • Up to version 2004: Windows Management Instrumentation (WMI)
    • Windows multimedia
    • Windows shell

License

Up to Windows XP you needed a license for the full operating system ( OEM , ISV , VL etc.) to use WinPE. However, the Preinstallation Environment (WinPE 2.0) has been generally accessible since Vista, and this also applies to version 5.0 under Windows 8.1.

To prevent Windows PE from being used as a free replacement for a commercial operating system, the shell will stop and restart after 72 hours of continuous use. This period is not configurable.

attachment

Individual evidence

  1. ↑ Description of WinFE / Windows Forensic Environment on Forensics Wiki
  2. ↑ Hello World! - Windows PE 2.0 (aka Vista WinPE) - Article dated February 24, 2006 at MSDN Blogs .

Web links

See also