Windows Security

UEFI/GPT Lab Part 1
Lab Objectives:
  • Create a UEFI bootable GPT partitioned drive in Windows 10
  • Copy boot files to the drive from Windows
  • Examine boot files in Windows
1.  Open a command prompt as an Administrator.

2. Enter 
 
	diskpart 

  Microsoft DiskPart version 10.0.19041.964

  Copyright (C) Microsoft Corporation.
  On computer: DESKTOP-8M0RP18

  DISKPART>
3.  Enter: 
 
	list disk 

  Disk ###  Status         Size     Free     Dyn  Gpt
  --------  -------------  -------  -------  ---  ---
  Disk 0    Online           60 GB  1024 KB
  Disk 1    Online           57 GB    57 GB
4.  Enter: 
 
	select disk <number>
Where <number> is the number of the disk you are going to partition. Ensure you select the correct disk or you may destroy your filesystem! 
  Disk 1 is now the selected disk.
5.  Enter: 
 
	clean
To erase the disk. 
  DiskPart succeeded in cleaning the disk.
6.  Enter: 
 
	convert gpt
To convert the disk to GPT format. 
  DiskPart successfully converted the selected disk to GPT format.
7.  Enter: 
 
	exit
To return to the command prompt.

8.  Enter: 
 
	powershell
To launch the powershell interpreter.
  Windows PowerShell
  Copyright (C) Microsoft Corporation. All rights reserved.

  Try the new cross-platform PowerShell https://aka.ms/pscore6
9.  Enter: 
 
	get-disk
To list available disks. 
  Number Friendly Name        Serial Number                    HealthStatus         OperationalStatus      Total Size Partition
                                                                                                                      Style
  ------ -------------        -------------                    ------------         -----------------      ---------- ----------
  0      QEMU HARDDISK        QM00001                          Healthy              Online                      60 GB MBR
  1      SanDisk Ultra USB... 4C530001131126121261             Healthy              Online                   57.28 GB GPT
10.  Enter: 
 
	New-Partition -DiskNumber <number> -Size 100MB -GptType "{c12a7328-f81f-11d2-ba4b-00a0c93ec93b}" -DriveLetter "S"
Where <number> is the correct number for your disk.
This creates an EFI system partition 100MB in size and labels it with the S: drive mount point. The "c12a7328-f81f-11d2-ba4b-00a0c93ec93b" GUID identifies it as an EFI system partition to GPT. 
		DiskPath:
	\\?\usbstor#disk&ven_sandisk&prod_ultra_usb_3.0&rev_1.00#4c530001131126121261&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

	PartitionNumber  DriveLetter Offset                                            Size Type
	---------------  ----------- ------                                            ---- ----
	1                S           1048576                                         100 MB System
11. Enter: 
 
	Format-Volume -FileSystem FAT32 -NewFileSystemLabel "SYSTEM" -DriveLetter "S" -Force
to format the partition with a FAT32 filesystem and label it "SYSTEM". 
	DriveLetter FriendlyName FileSystemType DriveType HealthStatus OperationalStatus SizeRemaining  Size
	----------- ------------ -------------- --------- ------------ ----------------- -------------  ----
	S           SYSTEM       FAT32          Removable Healthy      OK                        96 MB 96 MB
12.  Enter: 
 
	New-Partition -DiskNumber 1 -Size 16MB -GptType "{e3c9e316-0b5c-4db8-817d-f92df00215ae}"
to create a MSR partition. 
                DiskPath:
	\\?\usbstor#disk&ven_sandisk&prod_ultra_usb_3.0&rev_1.00#4c530001131126121261&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

	PartitionNumber  DriveLetter Offset                                            Size Type
	---------------  ----------- ------                                            ---- ----
	2                           105906176                                        16 MB Reserved
The "e3c9e316-0b5c-4db8-817d-f92df00215ae" GUID identifies the partion as an MSR.
13.  Enter: 
 
	New-Partition -DiskNumber 1 -UseMaximumSize -GptType "{ebd0a0a2-b9e5-4433-87c0-68b6b72699c7}" -DriveLetter "W"
To create a basic GPT partition with the rest of the storage space and assign drive letter W: 
		DiskPath:
	\\?\usbstor#disk&ven_sandisk&prod_ultra_usb_3.0&rev_1.00#4c530001131126121261&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

	PartitionNumber  DriveLetter Offset                                            Size Type
	---------------  ----------- ------                                            ---- ----
	3                W           122683392                                     57.17 GB Basic