Windows Server 2008 R2 Member Server Security Technical Implementation Guide

The Windows Server 2008 R2 Member Server Security Technical Implementation Guide (V1 R33) has 291 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

291STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R33

CurrentPublished Wed Jun 17 2020

Local volumes will be formatted using NTFS.

Windows Server 2008 R2 Member Server Security Technical Implementation Guide

Assessment Title

Rule Text

Local volumes will be formatted using NTFS.

Description

Discussion Text

This is a category 1 finding because the ability to set access permissions and audit critical directories and files is only available by using the NTFS file system. The capability to assign access permissions to file objects is a DoD policy requirement.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-1081

Rule

SV-32248r1_rule

Severity

high

Rule Version

2.008

Documentable

true

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Open Windows Explorer and use the Properties function on each fixed local partition/drive to examine the File System specified on the General tab.

If the File System does not specify NTFS, then this is a finding.
 
Documentable Explanation: Some hardware vendors create a small FAT partition to store troubleshooting and recovery data. No other files should be stored here.  This requirement should be documented with the IAO.

Implementation Procedure

Fix Text

Format all partitions/drives to use NTFS.

STIG check 9 of 291 in the Windows Server 2008 R2 Member Server STIG checklist

← Previous · V-1077Permissions for event logs must conform to minimum requirements.Next · V-1089 →The required legal notice must be configured to display before console logon.