What is NTFS?

All about the new technology file system by Microsoft

NTFS on a blue background

Imagine sorting through a towering pile of paperwork lacking any visible signs of order. An equally complicated affair ensues when a storage device lacks a file system. 

When you access folders from an external drive, a file system determines its name, storage location, and access method. While this may seem simple at the outset, data is rendered useless without it. 

File systems partition disk space into multiple logical regions, so users can organize their files into separate directories. Also stored on a file system are the file name, the file size, the position of the file in the folder hierarchy, date of creation, the most recent access, the most recent change to a file's metadata, and the last time it was backed up. 

A file system does more than just keep records, though. In addition, a file system maintains memory, encrypts data, regulates access to files, and ensures data integrity.

The new technology file system (NTFS) is Microsoft’s proprietary file system first introduced with Windows NT 3.1 in 1993.  

Superseding its predecessors — file allocation table (FAT) and high-performance file system (HPFS) — the NTFS file system features several improvements, including sparse file support, disk usage quotas, hard links, and file-level encryption.

Before we go over each enhancement in detail, let’s understand the inner workings of the NTFS file system.

How does NTFS work?

The master file table (MFT) keeps track of all file, directory, and metafile data within the NTFS file system. Essentially, the MFT is an index of all files on an NTFS volume, containing information about the file name, its attributes, and the location of its subfolders.

Each file or folder has two access control lists (ACLs). The‌‌ ‌‌discretionary‌‌ ‌‌access‌‌ ‌‌control‌‌ ‌‌list‌‌ ‌‌(DACL)‌ ‌outlines what types of interactions users or groups of users may or may not‌ ‌engage in. In C:/Program Files, for instance, all users may read and execute all files, but only the administrator may modify them.

The‌ second ‌ACL,‌ ‌known as the system access control list (SACL), determines which interactions with the file or folder should be audited. For example, an audit of sensitive company files allows management to ascertain exactly when a user attempted to delete or copy files. 

Additionally, the volume shadow copy service (VSS) preserves historical data on NTFS volumes by copying old, overwritten data to shadow copy via copy-on-write. The user may recover an earlier version upon request. On systems with high load, Microsoft recommends creating a shadow copy volume on a dedicated disk.

What’s new in NTFS?

Here’s a list of features that set NTFS apart from its predecessors.  

1. Support for long file names

NTFS allows file names to contain up to 255 characters, as opposed to FAT32's 83-character maximum. Additionally, files names aren’t case-sensitive and may contain special characters, excluding ?, ", /, \,

2. Theoretically limitless file size

NTFS can store files as large as 16 exabytes — an exabyte is also 1,000 times larger than a petabyte, which is the equivalent of 1024 terabytes. 

Additionally, NTFS can store volumes up to 8 petabytes on Windows Server 2019 and newer, more than double the capacity of older versions that could only handle‌ ‌volumes‌ ‌up ‌to‌ ‌256‌GB.

3. File compression

NTFS' compression algorithm can support a cluster size of up to 4KB. Each file in a drive, directory or directory tree can be compressed or decompressed individually. 

Compression ‌‌is most effective when a file has redundant content, can be accessed sequentially, and is not itself‌‌ ‌‌compressed.

4. Increased security

Data stored on NTFS volumes can be protected with BitLocker drive encryption. Starting with Windows Server 2012 R2 and Windows 8.1, BitLocker supports device encryption in 32-bit (x86)- and 64-bit (x64)-based operating systems‌ ‌with‌ ‌a‌ ‌trusted‌ ‌platform‌ ‌module‌ ‌(TPM)‌ ‌that‌ ‌supports‌ ‌Connected‌ ‌Standby power mode.

5. Sparse files

NTFS provides support for sparse files as a way to save disk space. Sparse files have a default data value of zero — unless configured otherwise. As a general rule, storage is only allocated when there’s an immediate need. 

Here’s how it works. A sparse file's metadata points to empty data blocks. When NTFS reads the file, it converts those arbitrary blocks into "real blocks" containing null bytes. The OS can thus store large files, even when there is not enough space to store them. 

For example, a 25GB application containing 3GB of files would require precisely 25GB of disk space. However, the total storage can be limited to 22GB when sparse files are used.

6. Disk quotas 

Disk quotas allow system administrators to monitor and control disk space assigned to individual users. Since Windows Vista, Microsoft has made it easy‌ ‌to‌ ‌shrink‌ ‌or‌ ‌expand‌ ‌a‌ ‌disk‌ ‌partition. That said,‌ shrinking a volume may require you to relocate or disable your page file, Windows Search index, and any shadow copy that System Restore uses.

Is NTFS universally supported?

NTFS is compatible with the following operating systems:

  1. Windows 10
  2. Windows 8
  3. Windows 7
  4. Windows Vista
  5. Windows XP
  6. Windows 2000
  7. Windows NT

Evidently, NTFS is predominantly a Windows-centric file system. By default, Mac OS can only read NTFS drives and not write to them. A few Linux distributions support writing to NTFS, but most do not. 

When NTFS is not supported, but you need a larger file-size limit FAT32 offers (4GB), you can use an extensible file allocation table (exFAT) file system. Microsoft’s exFAT is compatible with Mac OS, ChromeOS, and many media devices, including TVs, digital cameras, solid-state drives (SSD), and more. In Linux, exFAT is supported via filesystem in userspace (FUSE) software interface.

How to format an external drive using NTFS? 

In Windows, you can format an external drive, USB pen drive, or SD card using one of three file systems: NTFS, FAT32, or exFAT. To enable NTFS, use the following instructions:

1. Connect your device to the PC.

2. Navigate to “My Computer” (or This PC).

3. Right-click on the drive in question and select “Format” from the menu. A pop-up window should appear.

4. In the “Format” menu, click on “File System.” A drop-down should appear.

5. Select “NTFS” from the available options (NTFS, FAT32, exFAT).

6. Click “OK.”

Note: Formatting will erase all data from the disk. Make sure you have a backup before proceeding.

Featured Resources

Defeating ransomware with unified security from WatchGuard

How SMBs can defend against the onslaught of ransomware attacks

Free download

The IT expert’s guide to AI and content management

How artificial intelligence and machine learning could be critical to your business

Free download

The path to CX excellence

Four stages to thrive in the experience economy

Free download

Becoming an experience-based business

Your blueprint for a strong digital foundation

Free download

Recommended

Bug fixes and app updates arrive with latest Windows 11 preview build
Microsoft Windows

Bug fixes and app updates arrive with latest Windows 11 preview build

17 Sep 2021
Podcast transcript: Are foldable phones more than a fad?
Mobile

Podcast transcript: Are foldable phones more than a fad?

17 Sep 2021
The IT Pro Podcast: Are foldable phones more than a fad?
Mobile

The IT Pro Podcast: Are foldable phones more than a fad?

17 Sep 2021
Microsoft appoints Brad Smith as vice chair
Careers & training

Microsoft appoints Brad Smith as vice chair

15 Sep 2021

Most Popular

What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

8 Sep 2021
Apple patches zero-day flaw abused by infamous NSO exploit
exploits

Apple patches zero-day flaw abused by infamous NSO exploit

14 Sep 2021
Hackers develop Linux port of Cobalt Strike for new attacks
Security

Hackers develop Linux port of Cobalt Strike for new attacks

14 Sep 2021