Nepedia
Back to Discover
Advanced Reader
💻

NTFS

technology Maturity 5-7 war conflict Next article →

This article covers sensitive topics: war_conflict. Parents can manage visibility in Parental Controls.

The New Technology File System, known as NTFS, is a proprietary journaling file system. Microsoft developed it in the 1990s to manage how data is stored on a drive. It was designed to overcome the limitations found in older systems like FAT. NTFS is essential because it provides advanced features for security, reliability, and organization. It acts as a complex management layer for digital information.

NTPermissions
NTPermissions

NTFS uses several sophisticated mechanisms to maintain data integrity. One key feature is journaling, which uses the NTFS Log to record metadata changes. This allows the system to track changes before they are finalized. Another mechanism is the use of hidden files to store metadata. These files store information about other files on the drive to improve performance. NTFS also utilizes volume shadow copy. This feature allows the system to create backups of data while the system is still in use.

Security is a major component of the NTFS architecture. Each file or folder is assigned a security descriptor. This descriptor defines the owner and contains two types of access control lists, or ACLs. The first is the discretionary access control list (DACL). The DACL defines exactly which users or groups are allowed to read, write, execute, or delete a file. The second is the system access control list (SACL). The SACL is used for auditing. It tracks whether specific interactions with a file are successful or if they fail.

NTPermissions
NTPermissions

NTFS also provides a method for protecting data through the Encrypting File System (EFS). EFS provides user-transparent encryption for files and folders. The process works by encrypting a file with a bulk symmetric key, called a File Encryption Key (FEK). A symmetric key is used because it is faster at encrypting large amounts of data. This FEK is then encrypted with the user's public key. The encrypted FEK is stored in an alternate data stream of the file. To decrypt the data, the system uses the user's private key to unlock the FEK, which then unlocks the file.

Data management is further enhanced by features like transparent compression and sparse files. A sparse file is a type of file that does not occupy physical space for empty bytes. Instead, it represents those empty sections efficiently.

Sparse file (en)
Sparse file (en)

NTFS is also optimized for 4 KB clusters. However, it can support a maximum cluster size of up to 2MB. This flexibility allows the system to scale across different storage needs. The theoretical maximum size for a single file in NTFS is 18.4 exabytes. In modern implementations like Windows 10, the limit for a single file is 9 petabytes.

One Petabyte of Files (Windows 10 Professional)
One Petabyte of Files (Windows 10 Professional)

The history of NTFS is linked to a joint project between Microsoft and IBM. In the mid-1980s, they worked together on a graphical operating system. This project resulted in OS/2 and the High Performance File System (HPFS). When the companies separated, Microsoft developed Windows NT and NTFS. The original developers of NTFS included Tom Miller, Gary Kimura, Brian Andrew, and David Goebel. They borrowed many concepts from HPFS for the new system. Because of this shared history, both HPFS and NTFS use the same disk partition identification type code, which is 07.

Over time, Microsoft has released several versions of NTFS. Version 1.0 arrived in 1993 with Windows NT 3.1. Version 1.1 was released in 1994 and added named streams and ACLs. Version 1.2 arrived in 1996 with Windows NT 4.0. Version 3.0 was released with Windows 2000 and introduced disk quotas and file-level encryption. The version 3.1 update for Windows XP expanded the Master File Table (MFT) entries. These redundant entries help in recovering damaged MFT files. While new operating systems like Windows Vista added features like symbolic links, they often used existing NTFS capabilities.

NTFS is widely used across different computing environments. While it is a Microsoft product, other systems can interact with it. Linux and BSD systems use drivers like NTFS3 or NTFS-3G to read and write NTFS partitions. For example, the NTFS-3G implementation works on macOS, FreeBSD, and Solaris. Apple's Mac OS X has included read-only support since version 10.3. Some commercial drivers, such as Tuxera, provide enhanced support for Mac users. This interoperability allows users to move storage devices between different types of computers easily.

718 words

Where will your curiosity go next?

Keep exploring at your chosen reading level.

🖼️ Images & Media (3)
File:NTPermissions.png
NTPermissions.png
File:Sparse file (en).svg
Sparse file (en).svg
File:One Petabyte of Files (Windows 10 Professional).png
One Petabyte of Files (Windows 10...
More to explore

🔬 Go deeper

More advanced topics to explore

🪜 Step back

Simpler topics to build understanding

What is Nepedia?

A free, ad-free encyclopedia for children. Every article is written at five reading levels, so the same page works for a five-year-old and a fifteen-year-old — use the level switcher above to see this one change. No account needed to read.