NTFS
New Technology File System (NTFS) is a proprietary journaling file system developed by Microsoft. Starting with Windows NT 3.1, it is the default file system of the Windows NT family. It superseded File Allocation Table (FAT) as the preferred filesystem on Windows and is supported in Linux and BSD as well. NTFS reading and writing support is provided using a free and open-source kernel implementation known as NTFS3 in Linux and the NTFS-3G driver in BSD. By using the convert
command, Windows can convert FAT32/16/12 into NTFS without the need to rewrite all files. NTFS uses several files typically hidden from the user to store metadata about other files stored on the drive which can help improve speed and performance when reading data. Unlike FAT and High Performance File System (HPFS), NTFS supports access control lists (ACLs), filesystem encryption, transparent compression, sparse files and file system journaling. NTFS also supports shadow copy to allow backups of a system while it is running, but the functionality of the shadow copies varies between different versions of Windows.
Developer(s) | Microsoft |
---|---|
Full name | NT File System |
Introduced | July 27, 1993 with Windows NT 3.1 |
Partition IDs | 0x07 (MBR) EBD0A0A2-B9E5-4433-87C0-68B6B72699C7 (GPT) |
Structures | |
Directory contents | B-tree variant |
File allocation | Bitmap |
Bad blocks | $BadClus (MFT Record) |
Limits | |
Max volume size | 264 clusters − 1 cluster (format); 256 TB − 64 KB (Windows 10 version 1703, Windows Server 2016 or earlier implementation) 8 PB − 2 MB (Windows 10 version 1709, Windows Server 2019 or later implementation) |
Max file size | 16 EB − 1 KB (format); 16 TB − 64 KB (Windows 7, Windows Server 2008 R2 or earlier implementation) 256 TB − 64 KB (Windows 8, Windows Server 2012 or later implementation) 8 PB − 2 MB (Windows 10 version 1709, Windows Server 2019 or later implementation) |
Max no. of files | 4,294,967,295 (232−1) |
Max filename length | 255 UTF-16 code units |
Allowed filename characters | |
Features | |
Dates recorded | Creation, modification, POSIX change, access |
Date range | 1 January 1601 – 28 May 60056 (File times are 64-bit unsigned numbers counting 100-nanosecond intervals (ten million per second) since 1601, which is more than 58,000 years) |
Date resolution | 100 ns |
Forks | Yes (see § Alternate data stream (ADS) below) |
Attributes | Read-only, hidden, system, archive, not content indexed, off-line, temporary, compressed, encrypted |
File system permissions | ACLs |
Transparent compression | Per-file, LZ77 (Windows NT 3.51 onward) |
Transparent encryption | Per-file, DESX (Windows 2000 onward), Triple DES (Windows XP onward), AES (Windows XP Service Pack 1, Windows Server 2003 onward) |
Data deduplication | Yes (Windows Server 2012) |
Other | |
Supported operating systems | Windows NT 3.1 and later Mac OS X 10.3 and later (read-only) Linux kernel version 2.6 and later Linux kernel versions 2.2-2.4 (read-only) FreeBSD NetBSD OpenBSD (read-only) ChromeOS Solaris ReactOS (read-only) |