Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide

The Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide (V3 R7) has 364 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

364STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R7

CurrentPublished Thu Nov 09 2023

Local volumes must use a format that supports NTFS attributes.

Microsoft Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide

Assessment Title

Rule Text

Local volumes must use a format that supports NTFS attributes.

Description

Discussion Text

The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. To support this, local volumes must be formatted using a file system that supports NTFS attributes.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-226239

Rule

SV-226239r794530_rule

Severity

high

Rule Version

WN12-GE-000005

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Open "Computer Management".

Select "Disk Management" under "Storage".

For each local volume, if the file system does not indicate "NTFS", this is a finding.

"ReFS" (Resilient File System) is also acceptable and would not be a finding.

"CSV" (Cluster Share Volumes) is also acceptable and would not be a finding.

This does not apply to system partitions such as the Recovery and EFI System Partition.

Implementation Procedure

Fix Text

Format local volumes to use NTFS or ReFS.

STIG check 204 of 364 in the Microsoft Windows Server 2012/2012 R2 Domain Controller STIG checklist

← Previous · V-226238Only administrators responsible for the domain controller must have Administrator rights on the system.Next · V-226240 →Permissions for system drive root directory (usually C:\) must conform to minimum requirements.