Windows event error that the RAM disk is full on upgrade of client

Products

• Endpoint Protection

Issue/Introduction

During the upgrade of Endpoint Protection client there are Event ID 15 errors in the Windows Event Log for RegFilter referencing that the RAM disk is full and that the Registry Filter failed to save changed registry data.  Subsequent reboots after the installation process result with PTP errors related to a failure with Sonar definitions.

Event ID 15, RegFilter

The Registry Filter failed to save changed registry data because the RAM Disk if full.  Some keys might not be persisted correctly.

Environment

• Windows 7 Embedded Standard Service Pack 1
• File Based Write Filter is disabled
• Out of box install with default size of RAM disk (1000kb)

Cause

The default size of the Windows Embedded 7 RAM disk needed to be increased to support the changes during the migration/upgrade of the Endpoint Protection client.  A clean install was not affected as it is able to stay under the default threshold of the RAM disk. 

Resolution

The size of the default RAM disk was increased to 3 MB which created a RAM disk of sufficient size to support the changes to the system and Endpoint Protection client during the upgrade.