Microsoft Windows Server 2025

Windows Server 2025 local volumes must use a format that supports New Technology File System (NTFS) attributes

STIG ID: WN25-00-000130 | SRG: SRG-OS-000080-GPOS-00048 | Severity: High | CCI: CCI-000213 | Vulnerability ID: V-277997

Description

The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. To support this, volumes must be formatted using a file system that supports NTFS attributes.

Check

C-82527r1182021_chk

Open "Computer Management".

Select "Disk Management" under "Storage".

For each local volume, if the file system does not indicate "NTFS", this is a finding.

"ReFS" (Resilient File System) is also acceptable and would not be a finding.

"CSVFS" (Cluster Shared Volumes File Systems) is also acceptable and would not be a finding.

This does not apply to system partitions such the Recovery and EFI System Partition.

Fix

F-82432r1180696_fix

Format volumes to use NTFS, ReFS, or CSVFS.