Navigate

Check: WN19-00-000130

Microsoft Windows Server 2019 STIG: WN19-00-000130 (in versions v3 r6 through v3 r5)

Title

Windows Server 2019 local volumes must use a format that supports NTFS attributes. (Cat I impact)

Discussion

The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. To support this, volumes must be formatted using a file system that supports NTFS attributes.

Check Content

Open "Computer Management". Select "Disk Management" under "Storage". For each local volume, if the file system does not indicate "NTFS", this is a finding. Resilient file system (ReFS) and Cluster Shared Volumes (CSV) are also acceptable and are not findings. This does not apply to system partitions such the Recovery and EFI System Partition.

Fix Text

Format volumes to use NTFS, ReFS, or CSV.

Additional Identifiers

Rule ID: SV-205663r1137691_rule

Vulnerability ID: V-205663

Group Title: SRG-OS-000080-GPOS-00048

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000213	Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-3	Access Enforcement