File Screening with the FSRM


The second major feature that the File Server Resource Manager brings to the table is file screening. As we discussed earlier, file screening allows you to prevent users from saving blocked file types to your servers.

Just like with quotas, file screens can be built from scratch, or you can use and modify the supplied templates. You have the ability to apply file screens to a volume or folder while configuring exceptions so that certain users can save some of the blocked file types. Similar to quotas, you can configure file screening to block users from saving certain types of files, let them save them and notify you that they were saved, or both.

File Groups

File screens are configured through the use of File Groups. A File Group defines the files that should or should not be blocked. In addition, a File Group can be configured for specific exceptions that will override the blocking rule. Windows Server 2003 includes the following prebuilt file groups:

  • Audio and Video Files

  • Backup Files

  • Compressed Files

  • E-Mail Files

  • Executable Files

  • Image Files

  • Office Files

  • System Files

  • Temporary Files

  • Text Files

  • Web Page Files

Let's create a File Group specifically for those nonbusiness files that users like to store on servers, such as .mpg, .wma, and .mp3. Follow the procedure in Step by Step 13.11 to accomplish this.

Step by Step

13.11 Creating a File Group

1.

From the Start menu, click Start, Control Panel, Administrative Tools, File Server Resource Manager.

2.

In the File Server Resource Manager MMC, click to expand File Screening Management, and then click the File Groups entry.

3.

Click Create File Groups in the Actions pane as shown in Figure 13.26.

Figure 13.26. The FSRM showing the preconfigured file groups and the included file extensions.


4.

This displays the Create File Group Properties dialog box shown in Figure 13.27.



Figure 13.27. Enter the extensions of the files to block.


5.

Enter a name for the File group, and then enter the extensions of the files to block, using the format *.mp3. Click the Add button to add the file to the list.

6.

When you're finished, click OK to save. The new file group will be displayed in the FSRM MMC with the preconfigured file groups.

File Screen Templates

The File Groups are used as the basis for the following default file screen templates that are included with Windows Server 2003 R2:

  • Block Audio and Video Files

  • Block E-Mail Files

  • Block Executable Files

  • Block Image Files

  • Monitor Executable and System Files

You probably noticed that all the templates were titled "Block," except for the last one. Similar to the functionality of quotas, we have the ability to just monitor file save activity and notify the administrator when a specified file type is saved to the volume or folder.

Although we have the ability to create a simple file screen to apply to a single folder or volume, the best method is either to use one of the supplied templates, or use these templates as the basis for a custom template. Follow the procedure in Step by Step 13.12 to create a custom file screen template.

Step by Step

13.12 Creating a file screen template

1.

From the Start menu, click Start, Control Panel, Administrative Tools, File Server Resource Manager.

2.

In the File Server Resource Manager MMC, click to expand File Screening Management, and then click the File Screen Template entry.

3.

Click the Create File Screen Template entry in the Actions pane. This displays the Create File Screen Template dialog box shown in Figure 13.28.

Figure 13.28. Select the file group to use, or click the Create button to make a new one.


4.

Enter the name of the template, and then select the file group we created in Step by Step 13.11. Make sure that the Active Screening option button is selected.

5.

Click the E-Mail Message tab. Select the options to send an email to both the administrators and the user, as shown in Figure 13.29.

Figure 13.29. Select the options to send a notification message.


6.

When you're finished, click the OK button to save the template.

The template we just created will block the saving of the files that we specified in the file group and will send the user and the administrator an e-mail when the user attempts to save one of the file types.

Now that we have created a template, we need to apply it to a volume or folder. In Step by Step 13.13, we will set up a file screen on the root of the user's home folders to block the saving of any unauthorized files in their home folders.

Step by Step

13.13 Applying a file screen

1.

From the Start menu, click Start, Control Panel, Administrative Tools, File Server Resource Manager.

2.

In the File Server Resource Manager MMC, click to expand File Screening Management, and then click the File Screen entry.

3.

Click the Create File Screen entry in the Actions pane; this displays the Create File Screen template dialog box shown in Figure 13.30.

Figure 13.30. Select the file screen path, and then select the template to use.


4.

Enter the file path, and then select the file screen template we created in the previous step by step. Click OK to save.

5.

When you're finished, click the Create button to save.

File Screen Exceptions

Like everything else, the one-size-fits-all analogy doesn't always work for file screening. For example, what if the marketing department has a specific need to store video files, possibly out-takes for a commercial they are producing? Because you've already blocked *.mpg files, how are they going to be able to store their files on the servers?

When there is a need to allow files that other file screens are blocking, you need to create a file screen exception. A file screen exception is a file screen that is used to override the screening for a folder and its subfolders. This is done by attaching a file group to the screen, just as we have done with regular file screens.

Note: No Exceptions

You cannot apply a file screen exception on a folder that you have already applied a file screen to. The exception must either be assigned to a subfolder or the original file screen must be changed.


In Step by Step 13.14, we will set up a file screen exception on the root of the user's home folders to allow the saving of *.mpg files in the Marketing folder.

Step by Step

13.14 Creating a file screen exception

1.

From the Start menu, click Start, Control Panel, Administrative Tools, File Server Resource Manager.

2.

In the File Server Resource Manager MMC, click to expand File Screening Management. Then, right-click the File Screen entry and select Create File Screen Exception from the pop-up menu.

3.

This displays the Create File Screen Exception dialog box shown in Figure 13.31. Enter the exception path as shown.

Figure 13.31. Enter the exception path, and then click the Create button.


4.

Because there is not a predefined file group that contains only the *.mpg file type, click the Create button to open the Create File Group Properties dialog box, as shown in Figure 13.32.



Figure 13.32. Enter the desired extension.


5.

Click OK to save. This returns you to the Create File Screen Exception dialog box. Select the check box for the File Group that you just created, and then click OK to save. The File Screen and its associated exception is shown in Figure 13.33.

Figure 13.33. FSRM MMC showing a File Screen and its associated File Screen Exception.





MCSA. MCSE 70-290 Exam Prep. Managing and Maintaining a MicrosoftR Windows ServerT 2003 Environment
MCSA/MCSE 70-290 Exam Prep: Managing and Maintaining a Microsoft Windows Server 2003 Environment (2nd Edition)
ISBN: 0789736489
EAN: 2147483647
Year: 2006
Pages: 219
Authors: Lee Scales

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net