Windows Preinstallation Environment

Microsoft Windows PE ( PE stands for Pre-installation Environment, English for pre- installation environment, also called short WinPE) is a minimized Windows operating system. It is based on Windows XP and its successors ( up to and including Windows 8.1) and can be of different bootable storage media ( such as CD- ROM, USB flash drive or hard drive) to boot.

Development

The following versions are now available on the market:

  • "Windows PE 1.0" was the first released version of Microsoft. It was based on Windows XP. After a short time all the information were also removed from the Microsoft home page, because you could bypass the entire NTFS security policies using Windows PE.
  • "Windows PE 1.1" followed a short time later. Boot from the Windows Recovery Console was from this version is no longer officially supported. This version is still based on Windows XP or Windows XP SP1.
  • "Windows PE 1.2" had an extended API support and a complete VBScript Environment. This version based on Windows XP, Windows XP SP1 or Windows Server 2003.

Microsoft made ​​with the following versions of a step in a completely new direction and changed besides the version numbers and the licensing model to also allow resellers, Windows PE pass directly onto CDs that came to the customer.

  • "Windows PE 2004 ( 1.5)" for the first time based only on Windows XP SP2. In this version, PnP driver support and WMI functions were added.
  • "Windows PE 2005 ( 1.6)" also supports PXE boot environments other manufacturers. An enhanced RAM disk support came about, in which the entire CD is loaded into the RAM. This allows the removal of the disc during operation. The 2005 version is based on Windows XP SP2 and Windows Server 2003.
  • "Windows PE 2.0 " is based on Windows Vista and is part of the Windows Automated Installation Kit 1.0 for Windows Vista and downloaded for free (see links).
  • "Windows PE 2.1 " is part of the Windows Automated Installation Kit 1.1 for Windows Vista SP1 and Windows Server 2008 and also downloadable for free (see links).
  • "Windows PE 3.0 " is based on Windows 7 and is part of the Windows Automated Installation Kit for Windows 7 and downloaded for free (see links).
  • "Windows PE 3.1" is based on Windows 7 SP1 and is part of the supplement to the Windows Automated Installation Kit ( AIK) for Windows 7 SP1.
  • "Windows PE 4.0 " is based on Windows 8 and is part of the supplement to the Windows ADK (Windows Kits 8.0).
  • "Windows PE 5.0" based on Windows 8.1 and is part of the supplement to the Windows ADK (Windows Kits 8.1).

Windows PE is primarily intended for computer manufacturers and administrators. It should allow fully automatic installation of a Windows system on a new computer on which previously no operating system has been installed yet.

Windows PE provides a simple command line interpreter and only requires about 256 megabytes of RAM. After the start can be, for example, to partition and format hard drives or connect network drives, one of which then a Windows installation can be started.

More options

  • Limited Win32 interfaces
  • Command line ( cmd.exe)
  • Windows Scripting Host (WSH )
  • HTML Applications ( HTA)
  • ActiveX Data Objects ( ADO)
  • Network
  • NTFS Partition Management
  • Special hardware drivers for hardware diagnostics
  • Powering on from the PXE protocol (all versions with Microsoft RIS server, Version 2004 by ISO image transfer, and its successor WDS)
  • Plug-and- Play driver

Modification of Windows Forensic Environment

By modifying two registry entries is a useful for auditing and IT forensic investigations modification of Windows PE, the so-called WinFE (for Windows Forensic Environment) can be generated.

However, so far there are on a sound, empirical data conducted tests to prove the (IT - forensic ) proper function of the WinFE. Users of this modification is recommended to perform appropriate tests prior to use of WinFE itself.

Unsupported Features

The following functions are listed, which supports in normal versions of Windows, but in Windows PE or is no longer included.

  • Windows file shares
  • IPX / SPX
  • Up to version 2004: third-party Preboot Execution Environment (PXE ) Note: With version 2004, the start was supported by a transmitted via PXE ISO Image. Prior to start-up only through a Microsoft RIS server or an alternative solution with appropriate BINL support was possible via PXE.
  • Boot from a startup disk
  • Up to version 1.2: booting from a USB stick
  • Microsoft. NET Framework from version 4.0 NET. Supports 4 Framework
  • Only 32-bit Windows PE: Windows on Windows 32 ( WOW32 ) No 16- bit programs on 32 -bit systems
  • Only 64-bit Windows PE: Windows on Windows 64 (WOW64 ) no 32- bit programs on 64 -bit systems
  • Partially missing API components: Access Control
  • Active Directory Services Interfaces (ADSI)
  • DirectX
  • NetShow Theater Administration
  • OpenGL
  • Power Options ( Power Options )
  • Still Image
  • Tape backup (tape backup)
  • Terminal Services (Terminal Services)
  • User profiles (user profile )
  • Workstation ( window station ) and desktop
  • Up to version 2004: Windows Management Instrumentation ( WMI)
  • Windows Multimedia
  • Windows shell

Licensing

Up to Windows XP you needed a license for the full operating system (OEM, ISV, VL, etc.) to use WinPE allowed. Since, however, the Vista Preinstallation Environment (WinPE 2.0) is publicly available, that also applies to the current version 3.0 on Windows 7

For Windows PE can not be used as a pirated operating system, after 72 hours of continuous use, the design of the shell exits and run a reboot. This period is not configurable.

CD-ROM RAM drive Disk formatting Command Prompt Windows Deployment Services Internetwork Packet Exchange Sequenced Packet Exchange
570752
de