Boot Win8 OS from an External USB HDD with FULL OS backup & personal data encrypted and protected.

Booting Windows8 Operating System from an External USB Hard Disk With Full OS backup and all personal data encrypted and protected.

WEB Version: Click Here

PDF Version: Click Here

 

Part #1

Booting Windows8 Operating System from an External USB Hard Disk With Full OS backup and all personal data encrypted and protected.


Authors notes:

This is how my system is set up. It lets you boot your Windows8 OS from your choice of 2 USB external hard drives in case one drive fails.

It will encrypt and protect all your personal data.

It will make a backup of all your personal encrypted data in case of a system or hardware failure.

It will boot your computer into the Android-X86 OS when neither of your Windows8 OS USB HDD's are connected to your computer.

Both external USB Drives my be disconnected / removed and stored in a secure place for security or when not being use.


Please read this entire Article. Be familiar with it and the programs it uses before trying it.


Warning:

I have NOT tested the method using Windows8 on a Standard BIOS computer. It is quite possible it will work or maybe not.

This configuration here was used with UEFI and GPT on a Windows8 operating system.

Do not use this Article if you are NOT familiar with your Boot Hot Keys, file/drive/partition manipulation, file security and permissions, DOS command line usage/Batch files, or basic Windows OS operations.

(((( I am not responsible for YOU screwing up your computer! ))))


What is UEFI?

The Unified Extensible Firmware Interface (UEFI) is a specification that defines a software interface between an operating system and platform firmware. UEFI is meant to replace the Basic Input/Output System (BIOS) firmware interface, originally present in all IBM PC-compatible personal computers.

In addition to the standard PC disk partition scheme, which uses a master boot record (MBR), UEFI works with a new partitioning scheme: GUID Partition Table (GPT). GPT is free from many of the limitations of MBR. In particular, the MBR limits on the number and size of disk partitions (up to 4 primary partitions per disk, up to 2 TB (2 × 240 bytes) per disk) are relaxed. GPT allows for a maximum disk and partition size of 8 ZB (8 × 270 bytes).


Booting to UEFI configuration.

I am using a “HP All-in-One – 19-3013w”.

When I power on my computer, My system will display a “Start-up” Menu by repeatedly pressing the “Esc” Key.



By pressing the F10 key I can enter the UEFI or BIOS configuration.
By pressing the F9 key I can bring up the Boot Mode Menu.



Most computers will have such a key but it will sometimes be different according to manufacture of the computer.

You will need to find out which keys to use for your computer to access these menus.


Hardware / DVD Requirements:

Computer with UEFI.
Two External 2T > USB Hard drives, Initalized in MBR format.
Factory Reset / Recovery Disk or Windows8 or greater Instalation disk.
Android X86 OS instalation disk.


Required Software:

AOMEI Partition Assistant
http://www.disk-partition.com/download.html
TrueCrypt 7.2 ((Un-neutered))
https://www.grc.com/misc/truecrypt/truecrypt.htm
FreeFileSync
http://sourceforge.net/projects/freefilesync/
Classic Start Menu
http://www.classicshell.net/
http://www.classicshell.net/
android-x86-4.4-RC2.iso
http://www.android-x86.org/download

Suggested Software:
DirectX End-User Runtimes (June 2010)
http://www.microsoft.com/en-us/download/details.aspx?id=8109
Google Chrome
https://www.google.com/intl/en/chrome/
OpenOffice 4.1.1
http://www.openoffice.org/download/
Media Player Classic
http://sourceforge.net/projects/mpc-hc/
CCleaner
https://www.piriform.com/ccleaner
Adobe Reader
http://get.adobe.com/reader/


Getting Ready

A.) Initialize your Two USB external Hard drives to MBR and make a Partition on both.
B.) Burn all Required and Suggested software to DVD. Burn the android-x86-4.4-RC2.iso to CD or DVD.
C.) Have available your Computer's Factory Reset / Recovery Disk or Windoews8 (or greater) Instalation disk.

D.) Boot your computer in to the UEFI/BIOS configuration MENU.
E.) Disable your computers internal hard drive(s) and save configuration.
F.) Shutdown computer.

G.) Physically label your USB drives #1 and #2 so you don't get them mixed up.
H.) Plug in #1 USB Hard drive, leave the other unplugged.

Setup Drives and OS

NOTE:
“Shutdown” and “Log Off” are to different actions and are NOT interchangeable.
“Move” and “Copy” are to different actions and NOT interchangeable.


01.) Insert your Computer's Factory Reset / Recovery Disk or Windows8 (or greater) Instalation disk.

02.) Boot from the DVD drive and Install Windows8 on to the USB hard drive.

03.) After Install is complete.
Do a basic Start up / Set up of Windows8.
During windows setup you will be asked for a user name.



This is the same name that will be used for your user directory.

I suggest it is a single word with no spaces or special characters.

This directory will be referred to as (YourUserDirectory) in the rest of this Article.

04.) Install all Required and Suggested software.

05.) Create new folder on the desktop.

Rename folder to:
{ED7BA470-8E54-465E-825C-99712043E01C}
include brackets.

Folder name will automatically change to
“GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}”
by it's self.



06. ) Open “GodMode” folder.
Under “Action Center”
Select “Change User Account Control Settings”

Select “Never Notify”

Then “OK”.



07.) Open “GodMode” folder.
Under “Personalization”
Select “Show or hide common icons on the desktop”.

Check all icons

Press “Apply” then “OK”.

08.) Open “GodMode” folder.
Under “Folder Options”
Select “Show hidden files and folders”

On “View” Tab:

Select:
“Show hidden files”.

Deselect:
“Hide empty drives”
“Hide extensions for known file types”
“Hide folder merge conflicts”
“Hide protected operating system files”.

Press “Apply” then “OK”.

09.) Open “GodMode” folder.
Under “User Accounts”
Select “Create an account”

create a User called “My-Security” and give this user Administrator privileges.

10.) Log Off current user and Log On to the “My-Security” user.
Repeat Steps 5 – 8 for this user.

11.) Open “GodMode” folder.
Under “Administrative Tools”
Select “Create and format hard disk partitions”

Select “(C)” or your Window's BOOT drive.

Picture below is example only. “Your Information WILL BE different”.



Right Click your (C) or boot drive
Select “Shrink”

Picture below is example only. “Your Information WILL BE different”.



Shrink the drive as much as you can, but leave at least 100GB - 200GB for the OS.

Click “Shrink”

When Volume shrink is complete.

Picture below is example only. “Your Information WILL BE different”.



Highlight and right Click the new “Unallocated” space.
Select “New Simple Volume”

The “New Simple Volume Wizard” will pop up.

Make a New Volume using all the space and give it drive letter (A).

Close “Disk Management”

Setting up Encryption files and Virtual drives.


12.) Open folder: “C:\Program Files\TrueCrypt\”

Copy file: “TrueCrypt.exe” to your desktop.
Rename this file to “osk.exe”

Open folder: “C:\Windows\System32\”
Delete file: “osk.exe” from this folder.

Note: in order to delete this file you might have to take ownership and elevate your privileges over this file.

Watch the Video:


Move file: “osk.exe” from your “Desktop” to folder “C:\Windows\System32\”

13.) Run the TrueCrypt program with Administrator privileges.
Select the “Tools” drop down menu.
Select “Volume Creation Wizard”.



Select “Create a encrypted file container”
Click “Next”

A warning window will pop up. Click “No”.
Click “Next”



Volume Type

Select “Standard TrueCrypt Volume”
Click “Next”



Volume Location

If setting up USB #1 then; Input: “A:\P-Personal-1.TC” in the Volume Location box.
If setting up USB #2 then; Input: “A:\P-Personal-2.TC” in the Volume Location box.

Click “Next”



Encryption Options

Click “Next”


Volume Size

Enter “100” in the volume size window.
Select “GB”
Click “Next”



Volume Password

Enter Password
Note: your passwords should be the same for all volumes you create.
Click “Next”



Large Files

Select “Yes” for large files.
Click “Next”



Volume Format

Click “Format”

14.) Create a second TrueCrypt volume with the Volume location as:

If setting up USB #1 then; Input: “A:\T-My-User-1.TC” in the Volume Location box.
If setting up USB #2 then; Input: “A:\T-My-User-2.TC” in the Volume Location box.

Volume size 100GB.

These will be the encrypted volumes for your User Directory and Personal data.

15.) Shutdown your computer.

16.) Boot up your computer.

17.) At the password Log On screen

Click the “Ease of access” icon



Select “On screen keyboard”

The TrueCrypt program will pop up in Administrator Mode.





Use “Select file” button and Select:

If setting up USB #1 then; Select file: “A:\P-Personal-1.TC”.
If setting up USB #2 then; Select file: “A:\P-Personal-2.TC”.

Select the “P: drive.
Click “Mount”

Use “Select file” button and Select:

If setting up USB #1 then; Select file: “A:\T-My-User-1.TC”.
If setting up USB #2 then; Select file: “A:\T-My-User-2.TC”.

Select the “T: drive.
Click “Mount”

Clear “Volume Box”

Highlight/Select mounted drive “P” .
Select the “Favorites” drop down menu.”
Select “Add mounted volume to favorites”.
Click “OK”

Highlight/Select Mounted drive “T” .
Select the “Favorites” drop down menu.”
Select “Add mounted volume to favorites”.
Click “OK”

Select the “Settings” drop down menu.”
Select “Preferences”



Check: background task: “Enabled”

Uncheck: Auto-Dismount: “User logs off.”

Click “OK”


18.) Shutdown computer.

19.) Boot up your computer.

20.) At the password Log On screen

Click the “Ease of access” icon
Select “On screen keyboard”

The TrueCrypt program will pop up.

Select “Favorites” drop down menu.
Select “Mount Favorite Volumes”

Enter your password.

Click “OK”

Close TrueCrypt program.

This should mount both your encrypted volumes.

Note:
You will need to perform this step (mount these volumes) each time you boot your computer.

If you do not mount these volumes before you Log On to your User Account, The Window's OS will not find your user files and log you on to a temporary User work space. If this happens, just “Log Off, Mount Volumes and Log back on your User Account.

This will not happen to the “My-Security” user account. This account is not encrypted or backed up. I use it for system maintenance only. You may even log On to the “My-Security” account without mounting volumes to perform maintenance.

21.) Log On to your User account.

 

Part #2


Moving your personal files to encrypted drive “P”.


22.) Open your user directory.

C:\User\(YourUserDirectory)

In a new window, open.
P:\

Place the windows side by side.



Move all your personal files to the “P:\” drive.

These files are listed above in the right window.

USE “MOVE” - DO NOT USE “COPY”.

Windows OS will now use the encrypted drive “P” to store your personal files.

Close both windows.

Moving your User Directory to encrypted drive “T”.

23.) Shutdown computer.

24.) Boot up your computer.

25.) At Log On screen Mount Favorite Volumes (see step 20).

26.) Log On to the “My-Security” User.

27.) Open your user directory.
C:\User\(YourUserDirectory)

In a new window, open.
T:\

Place the windows side by side.



Copy all your User files to the “T:\” drive.

These files are listed above in the right window.

28.) On your desktop create new file called “junction.txt”.

Open this file and type the following text to the file.



NOTE: Change “YourUserDirectory” to the name of your user directory.

Save file and close it.
Rename file to “junction.bat”

Right Click file and run in Administrator Mode.



The Directory Junction Link should now appear in your User Directory.
When you Click this Link you should see the contents of your “T” drive.



Delete your user directory.
Remove the -1 from the Junction Link file name.

Windows OS will now use the encrypted drive “T” to store your User files.

Delete file “Junction.bat” from your desktop.

29.) Now we will make your “T” drive, “encrypted User directory”, backwards compatible
with older versions of Window's OS.

On your desktop create new file called “back.txt”.
Open this file and type the following text to the file.



Copy and Paste
You may copy the text below and paste it to your file so you don't have to type it.

mklink /J "T:\My Documents" "P:\Documents"
mklink /J "T:\My Documents\My Music" "P:\Music"
mklink /J "T:\My Documents\My Pictures" "P:\Pictures"
mklink /J "T:\My Documents\My Videos" "P:\Videos"
mklink /J "T:\Application Data" "T:\AppData\Roaming"
mklink /J "T:\Local Settings" "T:\AppData\Local"
mklink /J "T:\NetHood" "T:\AppData\Roaming\Microsoft\Windows\Network Shortcuts"
mklink /J "T:\PrintHood" "T:\AppData\Roaming\Microsoft\Windows\Printer Shortcuts"
mklink /J "T:\Recent" "T:\AppData\Roaming\Microsoft\Windows\Recent"
mklink /J "T:\SendTo" "T:\AppData\Roaming\Microsoft\Windows\SendTo"
mklink /J "T:\Start Menu" "T:\AppData\Roaming\Microsoft\Windows\Start Menu"
mklink /J "T:\Templates" "T:\AppData\Roaming\Microsoft\Windows\Templates"
mklink /J "T:\Local Settings\Application Data" "T:\AppData\Local"
mklink /J "T:\Local Settings\History" "T:\AppData\Local\Microsoft\Windows\History"
mklink /J "T:\Cookies" "T:\AppData\Local\Microsoft\Windows\INetCookies"
mklink /J "T:\AppData\Local\Temporary Internet Files" "T:\AppData\Local\Microsoft\Windows\INetCache"

Save and close file.
Rename file to “back.bat”

Right Click and Run file in Administrator Mode.



The Backwards Compatible Junction links will now appear in your “T” drive.
Move the “back.bat” to a safe location so you can use it later.
Close window.

30.)

MAKE SURE EVERYTHING IS WORKING
CORRECTLY BEFORE YOU CONTINUE!

Shutdown
Boot
Mount Volumes
Log On your User Account

Does it all work?

31.) Shutdown Computer.
Unplug USB #1.
Plug in USB #2.

(((Do This>>> Follow steps 01 – 30, to set up USB #2 drive. <<< Do This)))

Organizing Drives and Files

32.) We will now set the Two USB drives to work in conjunction with each other.

This means that in order to log on to your User Account on either drive
you will need to have both drives plugged in at the same time.

This will accomplish two things:

You can store your drives in two separate locations away from your computer. If anyone finds one of the drives they still will not be able to access your User Accounts without the other drive.

This also insures that both drives are plugged in so when you end your session and shut down the computer that all your personal data is backed up to the other drive.

33.) Shut down computer.
Plug in drive #1.
Leave drive #2 unplugged.
Boot computer.

DO NOT Mount Volumes. (We are going to move them and rename Partitions)

Log on to My-Security.

Plug in drive #2.

The Windows OS will now find the partitions on drive #2 and assign the partitions drive letters.

34.) Run program “AOMEI Partition Assistant Standard Edition 5.6”



On USB #2 , The NON-BOOT Disk
Change the Labels as shown above.
Remove all Drive letters on this disk..

Close Partition Assistant

35.) Open “GodMode” folder.
Under “Administrative Tools”
Select “Create and format hard disk partitions”

Find and highlight partition labeled “Data-2”
Right Click it and Select “Change drive letter”



Change drive letter to “B” and close program.

36.) Shut down computer.
Plug in drive #2.
Leave drive #1 unplugged.
Boot computer.

DO NOT Mount Volumes. (We are going to move them and rename Partitions)

Log on to “My-Security”.

Plug in drive #1.

The Windows OS will now find the partitions on drive #1 and assign the partitions drive letters.


37.) Run program “AOMEI Partition Assistant Standard Edition 5.6”



On USB #1, The NON-BOOT Disk
Change the Labels as shown above.
Remove all Drive letters on this disk..

Close Partition Assistant

38.) Open “GodMode” folder.
Under “Administrative Tools”
Select “Create and format hard disk partitions”

Find and highlight partition labeled “Data-1”
Right Click it and Select “Change drive letter”



Change drive letter to “B” and close program.

39.) Now that all the drives and disks are setup, we need to move the My-User files to make the USB drives dependent on each other for User Account Log On.

You should be currently booted to USB #2.

Open (A) and (B) and place windows side by side.

You will notice here that (A) contains “P-Personal-2.TC” and “T-My-User-2.TC”
You will notice here that (B) contains “P-Personal-1.TC” and “T-My-User-1.TC”

The Files “T-My-User-1.TC” and “T-My-User-2.TC” need to be switched.

After they are switched the dives should look like this:

(A) contains “P-Personal-2.TC” and “T-My-User-1.TC”
(B) contains “P-Personal-1.TC” and “T-My-User-2.TC”



40.) Now that the Disks are dependent, we need to set TrueCrypt to Mount the Volumes this way.

41.) Shut down computer.
Unplug USB #1

Boot Computer on USB #2
Do not Log On.
Plug in USB #1



42.) Click “Ease of Access” Icon
Select “On Screen Keyboard”

43.) The TrueCrypt Program will pop up.

Select “Favorites”
Select “Organize Favorites Volumes”

Hightlight/Select “T” drive
Click “Remove” button.
Click “OK” button.

Click “Select File” Button.
Locate and Select file “B:\T-My-User-2.TC“
Mount as “T” drive then add to Favorites.

Click “Select File” Button.
Locate and Select file “B:\P-Personal-1.TC“
Mount as “Y” drive then add to Favorites.



Now, when you boot from USB #2 and Mount Volumes, then Log On to your User
The Windows OS will use
“A:\P-Personal-2.TC” as “P”
“B:\T-My-User-2.TC” as “T”
“B:\P-Personal-1.TC” as “Y” – (will be used for backup)

44.) Shut down computer.
Unplug USB #2
Boot Computer on USB #1
Do not Log On.
Plug in USB #2

45.) Click “Ease of Access” Icon
Select “On Screen Keyboard”

46.) The TrueCrypt Program will pop up.

Select “Favorites”
Select “Organize Favorites Volumes”

Hightlight/Select “T” drive
Click “Remove” button.
Click “OK” button.

Click “Select File” Button.
Locate and Select file “B:\T-My-User-1.TC“
Mount as “T” drive then add to Favorites.

Click “Select File” Button.
Locate and Select file “B:\P-Personal-2.TC“
Mount as “Y” drive then add to Favorites.



Now, when you boot from USB #1 and Mount Volumes, then Log On to your User
The Windows OS will use
“A:\P-Personal-1.TC” as “P”
“B:\T-My-User-1.TC” as “T”
“B:\P-Personal-2.TC” as “Y” – (will be used for backup)


47.) Shutdown and boot from USB #1
Mount Favorite Volumes
Log On to your User.

Setting Up Auto Backup

48.) Run program “FreeFileSync”.



49.) Set Synchronization to “Mirror”.
Set Active Personal Drive to “P:\”
Set Backup Personal Drive to “Y:\”
Save configuration file “SyncSettings.ffs_gui” to desktop.
Close the program.

50.) Copy “SyncSettings.ffs_gui” to “A:\” and “B:\”.

Delete from desktop.

51.) Make a Batch File on desktop called “Shutdown.bat”.

Edit file with:

"A:\ SyncSettings.ffs_gui"
"C:\Windows\System32\shutdown.exe /p"

Save file: “Shutdown.bat ”.

Copy “Shutdown.bat ” to “A:\” and “B:\”.
Delete from desktop.

52.) Create a desktop shortcut to ““A:\Shutdown.bat ”
Rename Shortcut to “Shutdown.
Right Click Shortcut and Select “Properties”.
Change Icon to something you like .



Use this shortcut, from now on, to shutdown your computer.
This way you can back up all your personal files that changed in this session to your other drive before you shutdown.

Your Internal Drive

Your Internal Disk! (You can use this drive in many ways.)

In the beginning of this Article, we disabled this disk. You can now enter the UEFI/Bios Menu and enable this disk.

Also set your boot order to start computer the way you like.

On my configuration.
I moved my Personal files from the internal disk to drive “P”.
Then formatted the internal Disk into two partitions.

The first partition I sized at 10GB and installed the Android-X86 OS.
The second partition I use for storage only.

I set my Boot Order so that the computer will boot the Android OS if my USB drives are not plugged in.

If I have the USBs plugged in then I use the “Boot Mode Menu” to Select which USB to boot from.

The Android-X86 OS

I am not going into detail on how to install this OS.
If you made it threw this Article then there is no need for me to.

Here is the short of it.

Unplug all USB Hard drives.
Insert “Android-X86” Install disk in drive.
Boot from this disk.
Install OS.

Do NOT format any drives from within this installation setup.Partition and format from within Windows before you attempt install.

Do not create Window start up entry from within this installation.

Set user Image to max (2047) during installation.

Here are the Major Problems I had with installing this OS.

a.) Disk partitioning scheme
b.) Menu Timer
c.) Screen resolution.

Disk Partitioning scheme:
This should be MBR not GPT. This can be set with the“Partition Assistant” program.

Screen Resolution & Menu Timer.
After you have installed the Android OS on your internal drive
Boot to it.

If it boots correctly your done.

If it starts to boot then jumps to garbled screen then
follow the instructions below:

You will need to modify the “menu.lst” file. You will find the file in the “\grub” directory of the drive you just installed the Android OS on. You can open this file using “Notepad”.



Change or add the entry “vga=ask”. As shown above.

Save file.

Boot to Android OS.
The Grub will ask you to Select a Video Mode.
You will just have to pick a Mode and try it. It must be a 16 bit mode.
After you have found the correct Mode for your computer, then
Write down the Hexadecimal number of the mode.
Convert the number to Decimal.

Click for: Hexadecimal to Decimal converter
http://www.binaryhexconverter.com/hex-to-decimal-converter

Insert Decimal number into “menu.lst” in place of the “ask”
vga=decimal number

Now boot to the Android-X86 OS.. It should work fine.



[/SIZE][/FONT]