enter display name here
enter description here
Filesystem
NTFS
Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links:
Local Link to a Local Target
Local Link to a Remote Target
Remote Link to Remote Target
Remote Link to Local Target
For further information please refer to the Windows Help section
NOTE: If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.
Selectively allow the evaluation of a symbolic link
Do not allow compression on all NTFS volumes
Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of compressed files.
A reboot is required for this setting to take effect
Do not allow encryption on all NTFS volumes
Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files.
A reboot is required for this setting to take effect
Enable NTFS pagefile encryption
Encrypting the page file prevents malicious users from reading data that has been paged to disk, but also adds processing overhead for filesystem operations. Enabling this setting will cause the page files to be encrypted.
Enable Win32 long paths
Enabling Win32 long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 character limit per node on file systems that support it. Enabling this setting will cause the long paths to be accessible within the process.
Short name creation options
These settings provide control over whether or not short names are generated during file creation. Some applications require short names for compatibility, but short names have a negative performance impact on the system.
If you enable short names on all volumes then short names will always be generated. If you disable them on all volumes then they will never be generated. If you set short name creation to be configurable on a per volume basis then an on-disk flag will determine whether or not short names are created on a given volume. If you disable short name creation on all data volumes then short names will only be generated for files created on the system volume.
Enable on all volumes
Disable on all volumes
Enable / disable on a per volume basis
Disable on all data volumes
Disable delete notifications on all volumes
Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation.
A value of 0, the default, will enable delete notifications for all volumes.
A value of 1 will disable delete notifications for all volumes.
Enable / disable TXF deprecated features
TXF deprecated features included savepoints, secondary RM, miniversion and roll forward. Please enable it if you want to use these APIs.
Enable NTFS non-paged pool usage
By default NTFS allocates memory from both pageable and non-pageable memory as needed. Enabling this setting tells NTFS to use non-pageable memory for all allocations. NTFS also changes all of its code sections to be non-pageable.
The benefit of enabling this feature is a reduction in page-faults and stack usage at the cost of additional memory consumption.
A reboot is required for this setting to take effect
NTFS parallel flush threshold
When flushing modified file data from memory, NTFS chooses to use one or more threads based on how many files are currently open. This setting gives control over the open file threshold used to trigger parallel flush.
NTFS parallel flush worker threads
When flushing modified file data from memory, NTFS chooses to use one or more threads based on how many files are currently open. This setting gives control over how many threads will be used.
Making this value larger may decrease the time it takes to flush a volume but the flush may have a larger impact on other concurrent IO operations.
Values with special meaning:
0: Use the system calculated default
1: Disable parallel flush
The default value and limit for this setting varies based on the number of available processors on a given system:
- Default value calculation is: (([NumProcessors]/2) + 1)
- Default max value calculation is: ([NumProcessors]*2)
NTFS default tier
For NTFS tiered volumes this controls the tier that new allocations go to by default.
Client systems default to the Performance tier.
Server systems default to the Capacity tier.
Capacity tier
Performance tier
Local Link to Local Target
Local Link to a Remote Target
Remote Link to Remote Target
Remote Link to Local Target
Short name creation options
Open File Threshold:
Open File Threshold:
NTFS default tier options