Windows File System

The Windows file system is a hierarchical storage structure used by the Windows operating system to manage data on storage devices.
It supports multiple file systems, each with different capabilities and features designed to enhance security, performance, and compatibility.

Windows File System Hierarchy

Unlike Linux, Windows does not use a single root directory (/).
Instead, it uses drive letters (e.g., C:\, D:\) to organize file storage.
Structure of a typical Windows file system:

Root Directories [Drive Letters]:
Each storage device is assigned a drive letter (e.g., C:\, D:\).
The C:\ drive is usually the system partition where Windows is installed.

System Directories:
C:\Program Files (x86)\ – Stores 32-bit applications on 64-bit systems.
C:\Program Files\ – Default location for installed applications.
C:\Temp\ – Temporary files used by the OS and applications.
C:\Windows\ – Contains core operating system files.
C:\Users\ – Houses user profiles and personal files.

User Directories:
C:\Users\[Username]\Documents\ – Default location for user documents.
C:\Users\[Username]\Downloads\ – Stores downloaded files.
C:\Users\[Username]\Desktop\ – User’s desktop storage.
C:\Users\[Username]\AppData\ – Stores user-specific application data:
Local\ – Stores temporary and cache files.
LocalLow\ – Used for low-integrity applications.
Roaming\ – Synchronizes settings across multiple devices (if using a domain account).

Hidden and System Files:
C:\hiberfil.sys – Hibernation file storing system state.
C:\$Recycle.Bin\ – Recycle Bin storage for deleted files.
C:\Pagefile.sys – Windows paging file (virtual memory swap).
C:\Windows\System32\ – Critical system files and executables.
C:\Windows\SysWOW64\ – Contains 32-bit libraries on 64-bit Windows.

File System Features

Access Control and Security

NTFS uses Access Control Lists (ACLs) for file and folder permissions.
Windows supports encryption via BitLocker and EFS.

Journaling and Data Integrity

NTFS and ReFS use journaling to track file changes and prevent corruption.
ReFS includes automatic error correction and self-healing features.

Compression and Encryption

NTFS supports built-in file compression and encryption via EFS.

Shadow Copies and Backups

Windows Volume Shadow Copy Service [VSS] enables backups and system restore points.

File Attributes

Windows files and folders have special attributes that control their behavior and visibility.
These attributes can be managed through File Explorer properties or command-line tools.

NTFS Permissions and Ownership

NTFS provides granular control over file and folder access through permissions and ownership.
Understanding these concepts is crucial for system security and multi-user environments.

Standard NTFS Permissions

Permission Inheritance

Child folders and files inherit permissions from parent folders by default.
This simplifies permission management across directory structures.
Inheritance can be disabled for specific folders requiring custom permissions.

File System Commands

Windows provides powerful command-line tools for file system management.
These commands can be executed in Command Prompt (CMD) or PowerShell.

Essential CMD Commands

PowerShell Commands