Microsoft Windows Server 2025 Security Technical Implementation Guide

The Microsoft Windows Server 2025 Security Technical Implementation Guide (V1 R4) has 291 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

291STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Wed Sep 30 2026

Windows Server 2025 local volumes must use a format that supports New Technology File System (NTFS) attributes.

Microsoft Windows Server 2025 Security Technical Implementation Guide

Assessment Title

Rule Text

Windows Server 2025 local volumes must use a format that supports New Technology File System (NTFS) attributes.

Description

Discussion Text

The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. To support this, volumes must be formatted using a file system that supports NTFS attributes.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-277997

Rule

SV-277997r1268226_rule

Severity

high

Rule Version

WN25-00-000130

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Open "Computer Management".

Select "Disk Management" under "Storage".

For each local volume, if the file system does not indicate "NTFS", this is a finding.

"ReFS" (Resilient File System) is also acceptable and would not be a finding. 

"CSVFS" (Cluster Shared Volumes File Systems) is also acceptable and would not be a finding. 

This does not apply to system partitions such the Recovery and EFI System Partition.

Implementation Procedure

Fix Text

Format volumes to use NTFS, ReFS, or CSVFS.

STIG check 14 of 291 in the Microsoft Windows Server 2025 STIG checklist

← Previous · V-277996Windows Server 2025 must have a host-based intrusion detection and prevention service (IDPS) installed.Next · V-277998 →Windows Server 2025 permissions for the system drive root directory (usually C:\) must conform to minimum requirements.