Export (0) Print
Expand All
11 out of 12 rated this helpful - Rate this topic

What's New in File Server Resource Manager in Windows Server 2012

Published: February 29, 2012

Updated: August 7, 2013

Applies To: Windows Server 2012



This topic describes the features that were added to File Server Resource Manager in Windows Server 2012.

Did you mean…

File Server Resource Manager provides a set of features that allow you to manage and classify data that is stored on file servers. File Server Resource Manager includes the following features:

  • File Classification Infrastructure   Provides insight into your data by automating classification processes so that you can manage your data more effectively. You can classify files and apply policies based on this classification. Example policies include Dynamic Access Control for restricting access to files, file encryption, and file expiration. Files can be classified automatically by using file classification rules, or manually by modifying the properties of a selected file or folder.

  • File Management Tasks   Apply a conditional policy or action to files, based on their classification. The conditions of a file management task include the file location, the classification properties, the date the file was created, the last modified date of the file, or the last time the file was accessed. The actions that a file management task can take include the ability to expire files, encrypt files, or run a custom command.

  • Quota Management   Limit the space allowed for a volume or folder and quotas can be automatically applied to new folders that are created on a volume. You can also define quota templates that can be applied to new volumes or folders.

  • File Screening Management   Control the types of files that users can store on a file server. You can limit the extension that can be stored on your file shares. For example, you can create a file screen that does not allow files with an MP3 extension to be stored in personal shared folders on a file server.

  • Storage Reports   Identify trends in disk usage and how your data is classified, and monitor attempts by a selected group of users to save unauthorized files.

The features that are included with File Server Resource Manager can be configured and managed by using the File Server Resource Manager MMC console or by using Windows PowerShell.

The following table lists the changes that are new to File Server Resource Manager in Windows Server 2012.

 

Feature/functionality New or updated? Description

Dynamic Access Control

New

Dynamic Access Control uses File Classification Infrastructure to help you centrally control access and audit access to files on your file servers.

Automatic classification

Updated

The updates to automatic classification enable you to get more precise control on how data is classified on your file servers, including continuous classification, using Windows PowerShell for custom classification, updates to the existing content classifier, and dynamic name space for classification rules.

Manual classification

New

Manual classification enables users to classify files and folders manually without the need to create automatic classification rules.

File management tasks

Updated

The updates to file management tasks include an Active Directory Rights Management Services (AD RMS) file management task, continuous file management tasks, and dynamic name space for file management tasks.

Access-denied assistance

New

Access-denied assistance allows you to customize the access denied error message in Windows 8 that users see when they do not have access to a file or folder.

In Windows Server 2012, you can apply data governance across your file servers to control who can access information and to audit who has accessed information. Dynamic Access Control lets you:

  • Identify data by automatically or manually classifying files.

  • Control access to files by applying central access policies.

  • Audit access to files by using central audit policies for compliance reporting and forensic analysis.

What value does this change add?

Organizations can define central access and audit policies in Active Directory and use them to control who can access information and to track who accessed information in file servers.

Automatic classification by using File Classification Infrastructure has been enhanced in Windows Server 2012 in the following ways:

  • Continuous classification   Configure File Classification Infrastructure to classify files a few seconds after they are created or modified on the file server, without having to wait for the next scheduled time for the classification to occur.

  • Windows PowerShell classifier   Classify a file automatically by running a Windows PowerShell script that determines the file classification. The Windows PowerShell classifier makes it easier to implement custom classification logic that is specific to your organization. For example, you can classify a file based on who last created or modified the file.

  • Enhanced content classifier   Specify minimum and maximum occurrences of a string or regular expression. For example, you could classify a file that contains more than ten social security numbers as having personally identifiable information.

  • Dynamic name space for classification rules   Specify the type of information that a folder contains, such as application data, group data, or user data, and then configure classification rules based on the type of information in which you want these to operate.

On the Classification tab of the file properties in Windows Server 2012, File Classification Infrastructure adds the ability to manually classify files. You can also classify folders so that any file added to the classified folder will inherit the classifications of the parent folder.

What value does this change add?

Manual classification gives users and content owners the ability to classify their files and folders by using the properties sheet of that file or folder.

In Windows Server 2012, file management tasks have been updated in the following ways:

  • Active Directory Rights Management Services file management task   Encrypt automatically any file that has an AD RMS protector when a specified condition is met. You can select an existing AD RMS rights policy template or specify the policy manually.

  • Continuous file management tasks   Configure file management tasks to run a few seconds after files are created or modified on a file server when classification properties are defined as a condition in the file management task.

    noteNote
    You cannot configure the file management tasks to be continuous if you have configured a notification or if a fixed schedule is assigned.

  • Dynamic name space for file management tasks   Specify the type of information that a folder contains, such as application data, group data, or user data, and then configure file management tasks based on the type of information in which you want these to operate.

Access-denied assistance enables you to customize the access-denied error message that is displayed when a user running Windows 8 does not have access to a file or folder on a file server. You can configure the error message so that the user can request access to the file directly from the dialog box. You can also specify the user group that is sent the access request by using File Server Resource Manager.

Access-denied assistance can be configured by using Group Policy or by using the File Server Resource Manager console on each file server. You can also customize the error message per file server or you can have a separate error message for each file share on the file server. For more information about configuring access-denied assistance see Scenario: Access-Denied Assistance.

What value does this change add?

Access-denied assistance makes it easier for users to troubleshoot access issues for users so they can get access to the file and folders they need in a more efficient way.

In Windows Server 2012, the File Server Resource Manager command-line tools (dirquota.exe, filescrn.exe, and storrept.exe) are deprecated and all functionality has been replicated in Windows PowerShell cmdlets. The command-line tools still exist in the product, but all management tasks can be accomplished by using Windows PowerShell cmdlets.

noteNote
Any tasks that require a schedule cannot be configured by using the command line. You must use the Windows PowerShell cmdlets in File Server Resource Manager.

The following table provides additional resources for evaluating File Server Resource Manager.

 

Content type References

Product evaluation

What's New in File Server Resource Manager in Windows Server 2012

Related technologies

File and Storage Services Overview

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft. All rights reserved.