Detections
Analytics
WN25-DC-000120 - Windows Server 2025 data files owned by users must be on a different logical partition from the directory server data files.
Information
When directory service data files, especially for directories used for identification, authentication, or authorization, reside on the same logical partition as user-owned files, the directory service data may be more vulnerable to unauthorized access or other availability compromises. Directory service and user-owned data files sharing a partition may be configured with less restrictive permissions to allow access to the user data.The directory service may be vulnerable to a denial-of-service (DoS) attack when user-owned files on a common partition are expanded to an extent preventing the directory service from acquiring more space for directory or audit data.
Solution
Move shares used to store files owned by users to a different logical partition than the directory server data files.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-4, CAT|II, CCI|CCI-001090, Rule-ID|SV-278143r1182092_rule, STIG-ID|WN25-DC-000120, Vuln-ID|V-278143
Plugin: Windows
Control ID: 8f418ed42e860caad7e362d0f14e88dd698c8f755bfd9bda4975b08680a44d1a