To use a storage drive in Windows Server, you must first format and mount a volume. Formatting prepares the drive with a specific file system structure. You choose between NTFS (New Technology File System) and ReFS (Resilient File System). NTFS is the traditional, widely-used system that supports large files and offers strong security features like permissions and auditing. ReFS is a newer system designed for very large data sets, with a stronger focus on automatically detecting and correcting data corruption. The choice depends on your need for compatibility and advanced features versus maximum data integrity for large-scale storage.
Both NTFS and ReFS include features to protect data and save space. Integrity streams are a feature primarily in ReFS that continuously check data for corruption and can automatically repair it using healthy copies, which is crucial for protecting critical data. Data deduplication is a separate feature that saves disk space by finding identical blocks of data across files, storing only one copy, and then pointing all the duplicate files to that single copy. This is especially useful for file servers storing many similar files, like virtual machines or user documents.
A two-column comparison matrix mapping NTFS and ReFS across features like primary use, data integrity, and security. Corresponding feature nodes are connected horizontally to highlight similarities and differences.
Administrators can enforce rules to manage how storage is used. Disk quotas set a limit on how much disk space a user or group can consume, preventing any single user from filling up a shared drive. Access-Based Enumeration (ABE) is a security feature that hides files and folders from a user's view if they do not have permission to access them. This reduces clutter and helps prevent users from seeing the names of sensitive resources they cannot open, adding a layer of privacy and security.
To protect data from unauthorized access, especially if a physical drive is stolen, you can use file system encryption. BitLocker Drive Encryption is the primary tool for this, providing full-volume encryption. When enabled, all data on the volume is scrambled and can only be read by someone with the correct encryption key or recovery password. This encryption works on top of the NTFS or ReFS file system, ensuring data remains protected at rest, which is a key requirement for meeting organizational security and compliance policies.
Eager to master hybrid server management? Discover how to administer Windows Server Hybrid Core Infrastructure on Azure, setting your path towards the Microsoft Certified: Azure Hybrid Infrastructure Administrator Associate certification!
Prepare and test your skills
Prepare and test your skills
NTFS is the traditional, widely-used system that supports large files and offers strong security features like permissions and auditing. ReFS is a newer system designed for very large data sets, with a stronger focus on automatically detecting and correcting data corruption.
BitLocker Drive Encryption should be used to protect data from unauthorized access, especially if a physical drive is stolen, by providing full-volume encryption. It works on top of the NTFS or ReFS file system to ensure data remains protected at rest, which is a key requirement for meeting organizational security and compliance policies.
Access-Based Enumeration (ABE) is a security feature that hides files and folders from a user's view if they do not have permission to access them. This reduces clutter and helps prevent users from seeing the names of sensitive resources they cannot open, adding a layer of privacy and security.
StudyCerts
StudyCerts