Windows Server 2019 local volumes must use a format that supports NTFS attributes.

STIG ID: WN19-00-000130  |  SRG: SRG-OS-000080-GPOS-00048 |  Severity: high |  CCI: CCI-000213 |  Vulnerability Id: V-205663

Vulnerability Discussion

The ability to set access permissions and auditing is critical to maintaining the security and proper access controls of a system. To support this, volumes must be formatted using a file system that supports NTFS attributes.

Check

Open "Computer Management".

Select "Disk Management" under "Storage".

For each local volume, if the file system does not indicate "NTFS", this is a finding.

Resilient file system (ReFS) and Cluster Shared Volumes (CSV) are also acceptable and are not findings.

This does not apply to system partitions such the Recovery and EFI System Partition.

Fix

Format volumes to use NTFS, ReFS, or CSV.