Windows Server 2016: File Screen using FSRM (File Server Resource Manager)

Windows Server 2016: File Screen using FSRM (File Server Resource Manager)


// --------------------------------------------------------------------------------------

// Installation of FSRM (File Server Resource Manager)

1)  [Server Manager - Dashboard] - click on Manage - Click on Add roles and features - under Before you begin - click on Next - under Installation Type, select (x) role-based or feature-based installation - click on Next - under Server Selection ( // select your destination server, E,g: SRT-DC01.mylab.local) , click on (x) Select a server from the server pool, choose your selected server from the Server Pool -  click on Next - under Server Roles, click on File and Storage Services - click on File and iSCSI Services - select (x) File Server Resource Manager -  under Add Roles and Features Wizard, click on Add Features - click on Next - under Features, click on Next - under Confirmation, click on Install - under Results, click on Close .

// -------------------------------------------------------------------------------------

// Create Shared Folder

2)  [Server Manager - Dashboard] - click on File and Storage Service - click on Shares - under Tasks, click on New Share - under Select Profile, select (x) SMB Share - Quick - click on Next - select (x) Type a custom path, under New Share Wizard, under Select Folder, click on New Folder - input Folder Name ( E.g. FOLDER1 ) - click on Select Folder - the custom path will  be displayed (e.g. D:\FOLDER1) - click on Next - under Share Name, input Share Name as FOLDER1 ( // local path to share: - D:\FOLDER1 // Remote path to share:- \\SRT-DC01\FOLDER1 ) click on Next - under Other Settings, select (x) Enable access-based enumeration - click on Next - under Permissions, click on Next - under Confirmation, click on Create - under Results, click on Close.

3) [Server Manager - Dashboard] - click on File and Storage Service - click on Shares - you will see a new Share (i.e. Share:- FOLDER1 Local Path:- D:\FOLDER1 Protocol:- SMB ) .

// ------------------------------------------------------------------------------------

// - Create File Screen (e.g. Types of file extensions to block).

4)  [Server Manager - Dashboard] - click on Tools - click on File Server Resource Manager - under File Server Resource Manager, right-click on File Server Resource Manager (Local) - select (x) configure options - under File Server Resource Manager Options, click on OK - under File Screening management, click on File Groups (you should see the default 11 types of File Groups which accepts (Include Files) or rejects (Exclude Files) based on file extensions - right-click on File Screens - select (x) create File Screen - under Create File Screen, input File screen path:- D:\FOLDER1 (note: you can also use Browse function instead of typing) - you can choose (a) under Derive properties from this file screen template (recommended), select (x) Block Image File (i.e. as an example) or (b) under Define custom file screen properties, click on Custom Properties - under File groups > Select file groups to block, select (x) Image Files - click on Edit - under Settings, you can input type of files (i.e.- Files to include) - click on OK - under File Screen Properties on D:\FOLDER1, click on Event Log -  select (x) send warning to event log - click on OK - under Create File Screen, click on Create - under Save Custom Properties as a Template, select (x) Save the custom file screen without creating a template (i.e. as an example, this custome file screen is not saved) - click on OK .

5)  [Server Manager - Dashboard] - click on Tools - click on File Server Resource Manager - under File Server Resource Manager, right-click on File Server Resource Manager (Local) - under File Screening management, click on File Screens - you should see:- (Source Template: (1 item))  File Screen Path: D:\FOLDER1 , Screening Type: Active , File Groups: Block Image Files .


// -----------------------------------------------------------------------------------

// To test to see if the File Screen works.

6) Login workstation (on mylab.local domain) - run as: \\srt-dc01 - under Network > srt-dc01 > FOLDER1 , right-click (on blank workspace) New Folder - input Test1 (as new folder name) -  if you try to save an image file (e.g: image1.jpg to FOLDER1), you should see: Destination Folder Access Denied (You need permission to perform this action).

// See the warning message in Event Viewer

7) [Server Manager - Dashboard] - click on Tools - click on Event Viewer -  click on Custom Views - click on Administrative Events - you should see:- Level: Warning , Source: SRMSVC (double-click on it) - you should see the general & detailed info on the warning message.

// -----------------------------------------------------------------------------------


Comments