Reflect 8 No Longer Mounts an Image File for Windows Explorer


I've written a batch script which reverts the Vulnerable Driver Blocklist to the previous version (which doesn't block Macrium 8)


If you want to use psmounterex in the boot media one way is to use a wim from before the updated blocklist.
I think the latest winre.wim for that would be 26100.8031 from march 2026
en-us_windows_11_consumer_editions_version_25h2_updated_march_2026_x64_dvd_a1cf6c36.iso

In the macrium media builder there is an option to browse for a custom wim

macrium-custom-wim.webp
 
Last edited:

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
You can just mount the boot.wim and delete "\Windows\System32\CodeIntegrity\driversipolicy.p7b"
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Should be able to delete it very quickly with 7-zip gui.

delete-drivespolicy1.webp


Rt click the offending file and select delete


delete-drivespolicy2.webp


delete-drivespolicy3.webp


It has gorn

delete-drivespolicy4.webp


Isn't it better to have an earlier version of that file than none at all ?

What happens if instead driver.stl is deleted and previous.driver.stl is renamed to driver.stl ?

Or maybe rename both of them.

driver.stl > new.driver.stl and previous.driver.stl > driver.stl

What is the effect of that ?

delete-drivespolicy5.webp

 
Last edited:

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450

My Computer My Computer

At a glance

Windows 10, Linux MINT (V-guests 7, 11, ZorinOS)Intel Core i7-1070032gB (DDR4)Intel UHD Graphics 630
OS
Windows 10, Linux MINT (V-guests 7, 11, ZorinOS)
Computer type
PC/Desktop
Manufacturer/Model
HP Z2 G5 Workstation
CPU
Intel Core i7-10700
Motherboard
HP Model# 8751
Memory
32gB (DDR4)
Graphics Card(s)
Intel UHD Graphics 630
Sound Card
Realtek basic audio
Monitor(s) Displays
32" (Viewsonic) UHD
Screen Resolution
3840 x 2160
Hard Drives
2-NvME (mainboard), 1-NvME (PCIe), 1-SATA3 SSD
This my solution - Macrium 8 free

1) Start->right click ->Device manager -> network adapters-> disable wireless adapter (I use wireless adapter)
2) Start->Settings->device security->core isolation details->Microsoft vulnerable block list-->off
3)Restart
4)Mount Macrium image and retrieve files or folder
5) undo #2
6)Restart
7)Undo #1
 

My Computer My Computer

At a glance

windows 11 ,Ubuntu Cinnamon - for tinkering onlyIntel i51140016 GB0
OS
windows 11 ,Ubuntu Cinnamon - for tinkering only
Computer type
PC/Desktop
Manufacturer/Model
No Name - Assembled by a Compute shop in a Strip Mall.
CPU
Intel i511400
Motherboard
ASUS PRIME B560-PLUS motherboard
Memory
16 GB
Graphics Card(s)
0
Sound Card
0
Monitor(s) Displays
25 in BenQ
Screen Resolution
1920 x 1080
Hard Drives
9 SSDs 4 Nvme, 2 in M.2 slot and 2 in PCIE with adapter + 5 Sata. DVD drive
PSU
600w
Case
Antec- VSK4000E-U3 Mid Tower
Internet Speed
Bell pure fibre optic. 3 GB package. 6E Wireless adapter 750/500
Browser
Firefox, Microsoft Edge
Antivirus
Defender
This my solution - Macrium 8 free

1) Start->right click ->Device manager -> network adapters-> disable wireless adapter (I use wireless adapter)
2) Start->Settings->device security->core isolation details->Microsoft vulnerable block list-->off
3)Restart
4)Mount Macrium image and retrieve files or folder
5) undo #2
6)Restart
7)Undo #1
Nuking your security is not an effective solution!
 

My Computer My Computer

At a glance

Windows 11 ProCore i7-13700K64 GB Kingston Fury Beast DDR5Gigabyte GeForce RTX 2060 Super Gaming OC 8G
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
Self build
CPU
Core i7-13700K
Motherboard
Asus TUF Gaming Plus WiFi Z790
Memory
64 GB Kingston Fury Beast DDR5
Graphics Card(s)
Gigabyte GeForce RTX 2060 Super Gaming OC 8G
Sound Card
Realtek S1200A
Monitor(s) Displays
Viewsonic VP2770 & Dell (secondary)
Screen Resolution
2560 x 1440
Hard Drives
Kingston KC3000 2TB NVME SSD & SATA HDDs & SSD
PSU
EVGA SuperNova G2 850W
Case
Nanoxia Deep Silence 1
Cooling
Noctua NH-D14
Keyboard
Microsoft Digital Media Pro
Mouse
Logitech Wireless
Internet Speed
80 Mb / s
Browser
Chrome
Antivirus
Defender, Malwarebytes Free & AdwCleaner
My suggested fix was to roll back the driver blocklist to the previous version. So you're mostly protected.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Nuking your security is not an effective solution!
I am disconnected from the internet when the security is nuked.

Addendum. I did further reading with the help of co-pilot. The risk is not totally mitigated if I am not connected to the internet. However, it is minimal if I just mount the image retrieve some files and do nothing else.
 
Last edited:

My Computer My Computer

At a glance

windows 11 ,Ubuntu Cinnamon - for tinkering onlyIntel i51140016 GB0
OS
windows 11 ,Ubuntu Cinnamon - for tinkering only
Computer type
PC/Desktop
Manufacturer/Model
No Name - Assembled by a Compute shop in a Strip Mall.
CPU
Intel i511400
Motherboard
ASUS PRIME B560-PLUS motherboard
Memory
16 GB
Graphics Card(s)
0
Sound Card
0
Monitor(s) Displays
25 in BenQ
Screen Resolution
1920 x 1080
Hard Drives
9 SSDs 4 Nvme, 2 in M.2 slot and 2 in PCIE with adapter + 5 Sata. DVD drive
PSU
600w
Case
Antec- VSK4000E-U3 Mid Tower
Internet Speed
Bell pure fibre optic. 3 GB package. 6E Wireless adapter 750/500
Browser
Firefox, Microsoft Edge
Antivirus
Defender
Unless Macrium restores the functionality, provides a free upgrade to Reflect X, or refunds the licence cost, you are in breach of contract for failing to supply the product as advertised.
I know nothing about British law, but I suspect Paramount is under no obligation to provide support for a product that is beyond its EoL date, and I'm sure they will not offer free upgrade to Reflect 10. However, the Macrium Reflect 8.1 LTSC (Long Term Service Channel) is supported through 2027 so some kind of remediation is going to be available to some 8.1 users. Hopefully that will be made available to all 8.1 users
 

My Computers My Computers

  • At a glance

    Windows 11Intel Core i5-840016GBIntel UHD Graphics 630
    OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Microsoft
    CPU
    Intel Core i5-8400
    Motherboard
    ASUS PRIME H370-PLUS
    Memory
    16GB
    Graphics Card(s)
    Intel UHD Graphics 630
    Sound Card
    On board
    Monitor(s) Displays
    Samsung SyncMaster 2043BWX
    Screen Resolution
    1680 x 1050
    Hard Drives
    Samsung SSD 850 256GB
    WDC 1TB NVMe
    WD 3TB external USB drive
    PSU
    I don't remember
    Case
    Corsair something-or-other
    Cooling
    Air CPU + 2 case fans
    Keyboard
    DAS S Pro (Cherry Brown)
    Mouse
    Logitech USB of some sort
  • At a glance

    Windows 10 21H1i5-840016GBon board
    Operating System
    Windows 10 21H1
    Computer type
    PC/Desktop
    Manufacturer/Model
    Homegrown
    CPU
    i5-8400
    Motherboard
    ASUS PRIME H370-PLUS
    Memory
    16GB
    Graphics card(s)
    on board
    Sound Card
    on board
    Monitor(s) Displays
    Samsung SyncMaster 2043 BWX
    Screen Resolution
    1280 x 1024
    Hard Drives
    Samsung SSD 850 EVO 250GB, WDS100T3X0C-00SJG0
    PSU
    don't remember
    Case
    Corsair Carbide 100r
    Cooling
    stock
    Keyboard
    DAC something or other
    Mouse
    Logitech M-U-0007
    Internet Speed
    80/6 Mbs
    Browser
    FireFox
    Antivirus
    Kaspersky Internet security
You can just mount the boot.wim and delete "\Windows\System32\CodeIntegrity\driversipolicy.p7b"

error message:
The operating system couldn't be loaded because code integrity failed to initialize :(
 

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
For now the solution seems to be an earlier winre.wim.
The one from 25h2 march installation media is the most recent that works with macrium mounting as far as I can tell
 

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
I know nothing about British law, but I suspect Paramount is under no obligation to provide support for a product that is beyond its EoL date, and I'm sure they will not offer free upgrade to Reflect 10. However, the Macrium Reflect 8.1 LTSC (Long Term Service Channel) is supported through 2027 so some kind of remediation is going to be available to some 8.1 users. Hopefully that will be made available to all 8.1 users
Under UK law, specifically the Consumer Rights Act 2015, digital products such as Macrium Reflect 8 must remain as described, fit for purpose, and functional for a reasonable period, which for paid software is generally interpreted as up to six years — the standard limitation period for breach‑of‑contract claims. Even if Reflect 8 is end‑of‑life, Macrium is still legally obliged to ensure that core, advertised features continue to work for a reasonable time after purchase; they cannot rely on EOL status to avoid responsibility. If a key feature like image mounting stops working due to Macrium’s failure to maintain compatibility, the product no longer matches its description, and the customer retains the right to a repair, replacement, or refund for up to six years from the purchase date.
 

My Computer My Computer

At a glance

Windows 11 ProCore i7-13700K64 GB Kingston Fury Beast DDR5Gigabyte GeForce RTX 2060 Super Gaming OC 8G
OS
Windows 11 Pro
Computer type
PC/Desktop
Manufacturer/Model
Self build
CPU
Core i7-13700K
Motherboard
Asus TUF Gaming Plus WiFi Z790
Memory
64 GB Kingston Fury Beast DDR5
Graphics Card(s)
Gigabyte GeForce RTX 2060 Super Gaming OC 8G
Sound Card
Realtek S1200A
Monitor(s) Displays
Viewsonic VP2770 & Dell (secondary)
Screen Resolution
2560 x 1440
Hard Drives
Kingston KC3000 2TB NVME SSD & SATA HDDs & SSD
PSU
EVGA SuperNova G2 850W
Case
Nanoxia Deep Silence 1
Cooling
Noctua NH-D14
Keyboard
Microsoft Digital Media Pro
Mouse
Logitech Wireless
Internet Speed
80 Mb / s
Browser
Chrome
Antivirus
Defender, Malwarebytes Free & AdwCleaner
For now the solution seems to be an earlier winre.wim.
The one from 25h2 march installation media is the most recent that works with macrium mounting as far as I can tell
March 2026 image will have the previous version of driversipolicy.p7b embedded in the WinRE.wim.

You can copy the old file from WinSxS:
Code:
C:\Windows\WinSxS\amd64_microsoft-windows-c..egrity-driverpolicy_31bf3856ad364e35_10.0.26100.7623_none_4fe4046d9426924f\driversipolicy.p7b
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
March 2026 image will have the previous version of driversipolicy.p7b embedded in the WinRE.wim.

You can copy the old file from WinSxS:
Code:
C:\Windows\WinSxS\amd64_microsoft-windows-c..egrity-driverpolicy_31bf3856ad364e35_10.0.26100.7623_none_4fe4046d9426924f\driversipolicy.p7b

Boots up ok but macrium doesnt mount, psmounterex not working.

will try with 7623 driver.stl files as well
 

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
sadly macrium mounting doesnt work with with 7623 driver.stl files as well :(
 

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
also tried swapping the code integrity folder from 26100.8031 into 2800 winre. Refused to boot.

might work in a different 26100 or 26200 winre for example from the april 26 25h2 media.
 

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
could use 26100.8031 wim or earlier.


 
Last edited:

My Computers My Computers

  • At a glance

    Win7,Win11i7-97002x16gb 3600mhz
    OS
    Win7,Win11
    Computer type
    PC/Desktop
    CPU
    i7-9700
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x16gb 3600mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • At a glance

    win7,win11i5-84002x8gb 3200
    Operating System
    win7,win11
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200
    PSU
    xfx pro 450
Microsoft has decided to "blacklist" psmounterex.sys as a security risk

Solution ...
Open the regedit in admin mode, navigate to
HKLM\SYSTEM\CurrentControlSet\Control\CI\Config > VulnerableDriverBlocklistEnable and modify the key from 1 to 0
Reboot, mount the image, when done then unmount image, change the key back from 0 to 1, reboot

Take that, Microsoft!

But the usual caveat applies, image your system before trying anything
 

My Computers My Computers

  • At a glance

    Windows 11 2xH2 (latest update ... forever anal)Intel i5-124008GBNVIDIA GeForce GT730
    OS
    Windows 11 2xH2 (latest update ... forever anal)
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Slim S01
    CPU
    Intel i5-12400
    Memory
    8GB
    Graphics Card(s)
    NVIDIA GeForce GT730
    Sound Card
    OOBE
    Monitor(s) Displays
    Acer 32"
    Screen Resolution
    1920x1080
    Hard Drives
    512GB KIOXIA NVMe
    1TB SATA SSD
    PSU
    OOBE
    Case
    OOBE
    Cooling
    OOBE
    Keyboard
    BT
    Mouse
    BT
    Browser
    Brave FFox Chrome Opera
    Antivirus
    KIS
  • At a glance

    Windows 11 Pro 2xH2 (latest update ... 4ever ...i7-1165G7 @ 2.80GHzIntel Iris Xe Graphics
    Operating System
    Windows 11 Pro 2xH2 (latest update ... 4ever anal)
    Computer type
    Laptop
    Manufacturer/Model
    HP Pavillion 15
    CPU
    i7-1165G7 @ 2.80GHz
    Graphics card(s)
    Intel Iris Xe Graphics
    Hard Drives
    Samsung NVMe 512GB
    + numerous/multiple SSD Type C USB enclosures
    Internet Speed
    NBN FTTN 50
    Browser
    Brave
    Antivirus
    KIS
Why the Microsoft's decision of blacklisting was correct:

1) Information about psmounterex.sys on the resource Living Off The Land Drivers (LOLDrivers.io):

2) Investigation of vulnerability and demo exploit by Northwave cyber security (in two parts):

From the conclusion:
We developed proof-of-concept exploits for each vulnerability and shipped these, along with a root cause analysis, to the software manufacturer. [...] The manufacturer quickly fixed the bugs...

Now we users can hope that the fixed version of this driver will be publicly available when Microsoft will check its security. At least, for Macrium Reflect 8.1 LTSC.
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2AMD Rysen 5 4600H32 GB (2 x 16 GB Samsung SO-DIMM DDR4-3200)GeForce GTX 1650 Ti, 4 GB GDDR6
OS
Windows 11 Pro 25H2
Computer type
Laptop
Manufacturer/Model
Lenovo Legion 5-15ARH05
CPU
AMD Rysen 5 4600H
Memory
32 GB (2 x 16 GB Samsung SO-DIMM DDR4-3200)
Graphics Card(s)
GeForce GTX 1650 Ti, 4 GB GDDR6
Screen Resolution
1920x1080
Hard Drives
SSD M.2 512 GB SAMSUNG MZALQ512; SSD M.2 1 TB Seagate FireCuda 530
Mouse
Logitech M650L in Bluetooth mode
I do not have a problem mounting an image using Mr 8.1 on my wife's PC.
 

My Computers My Computers

  • At a glance

    Windows11 Pro 26200.8894Intel Core i9 14900F (24 -Core, 68 MB Total C...32GB DDR5RTX 4080 Super w/610.74
    OS
    Windows11 Pro 26200.8894
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Alienware Aurora R16
    CPU
    Intel Core i9 14900F (24 -Core, 68 MB Total Cache)
    Motherboard
    Dell Alienware
    Memory
    32GB DDR5
    Graphics Card(s)
    RTX 4080 Super w/610.74
    Sound Card
    Realtec
    Monitor(s) Displays
    Corsair XENEON 32QHD165
    Screen Resolution
    2560 X 1440
    Hard Drives
    1-2TB Samsung 990 Pro PCIe NVMe M2 SSD
    1-4TB Samsung 990 Pro PCIe NVMe M2 SSD
    PSU
    1000 Watt Platinum Dell
    Case
    Alienware
    Cooling
    Liquid Closed Loop
    Keyboard
    Corsair Strafe RGB
    Mouse
    Logitech MK270 Wireless
    Internet Speed
    100Gb's Down-20 Up
    Browser
    Firefox 152.0.6
    Antivirus
    Defender
    Other Info
    Very Quiet And Fast
    CyberPower UPS CP1500PFCLCD
  • At a glance

    PClinuxOS Mate (2025.7)13th Gen Inter(R) Core(TM) i3-1315U64 GB DDR4 @3200 MHz.Internal
    Operating System
    PClinuxOS Mate (2025.7)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel
    CPU
    13th Gen Inter(R) Core(TM) i3-1315U
    Motherboard
    Intel
    Memory
    64 GB DDR4 @3200 MHz.
    Graphics card(s)
    Internal
    Sound Card
    None
    Monitor(s) Displays
    Dell 2419HGCF
    Screen Resolution
    1920 X 1080
    Hard Drives
    SAMSUNG 980 PRO SSD 2TB, PCIe 4.0 M.2 2280
    PSU
    Chicony 30 Watt
    Case
    Small
    Keyboard
    Dell
    Mouse
    Razor
    Internet Speed
    1GB
    Browser
    Slimjet

Latest Support Threads

Back
Top Bottom