Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-1081 | 2.008 | SV-32248r1_rule | ECCD-1 ECCD-2 | High |
Description |
---|
This is a category 1 finding because the ability to set access permissions and audit critical directories and files is only available by using the NTFS file system. The capability to assign access permissions to file objects is a DoD policy requirement. |
STIG | Date |
---|---|
Windows Server 2008 R2 Member Server Security Technical Implementation Guide | 2015-03-09 |
Check Text ( C-32917r1_chk ) |
---|
Open Windows Explorer and use the Properties function on each fixed local partition/drive to examine the File System specified on the General tab. If the File System does not specify NTFS, then this is a finding. Documentable Explanation: Some hardware vendors create a small FAT partition to store troubleshooting and recovery data. No other files should be stored here. This requirement should be documented with the IAO. |
Fix Text (F-53r1_fix) |
---|
Format all partitions/drives to use NTFS. |