File Server Resource Manager (FSRM) overview
Applies to: Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Windows Server (Semi-Annual Channel),
File Server Resource Manager (FSRM) is a role service in Windows Server that enables you to manage and classify data stored on file servers. You can use File Server Resource Manager to automatically classify files, perform tasks based on these classifications, set quotas on folders, and create reports monitoring storage usage.
It’s a small point, but we also added the ability to disable change journals in Windows Server, version 1803.
Features
File Server Resource Manager includes the following features:
- Quota management allows you to limit the space that is allowed for a volume or folder, and they can be automatically applied to new folders that are created on a volume. You can also define quota templates that can be applied to new volumes or folders.
- File Classification Infrastructure provides insight into your data by automating classification processes so that you can manage your data more effectively. You can classify files and apply policies based on this classification. Example policies include dynamic access control for restricting access to files, file encryption, and file expiration. Files can be classified automatically by using file classification rules or manually by modifying the properties of a selected file or folder.
- File Management Tasks enables you to apply a conditional policy or action to files based on their classification. The conditions of a file management task include the file location, the classification properties, the date the file was created, the last modified date of the file, or the last time the file was accessed. The actions that a file management task can take include the ability to expire files, encrypt files, or run a custom command.
- File screening management helps you control the types of files that user can store on a file server. You can limit the extension that can be stored on your shared files. For example, you can create a file screen that does not allow files with an MP3 extension to be stored in personal shared folders on a file server.
- Storage reports help you identify trends in disk usage and how your data is classified. You can also monitor a selected group of users for attempts to save unauthorized files.
The features included with File Server Resource Manager can be configured and managed by using the File Server Resource Manager app or by using Windows PowerShell.
File Server Resource Manager supports volumes formatted with the NTFS file system only. The Resilient File System isn’t supported.
Practical applications
Some practical applications for File Server Resource Manager include:
Use File Classification Infrastructure with the Dynamic Access Control scenario to create a policy that grants access to files and folders based on the way files are classified on the file server.
Create a file classification rule that tags any file that contains at least 10 social security numbers as having personally identifiable information.
Expire any file that has not been modified in the last 10 years.
Create a 200 megabyte quota for each user’s home directory and notify them when they are using 180 megabytes.
Do not allow any music files to be stored in personal shared folders.
Schedule a report that runs every Sunday night at midnight that generates a list of the most recently accessed files from the previous two days. This can help you determine the weekend storage activity and plan your server downtime accordingly.
What’s new — prevent FSRM from creating change journals
Starting with Windows Server, version 1803, you can now prevent the File Server Resource Manager service from creating a change journal (also known as a USN journal) on volumes when the service starts. This can conserve a little bit of space on each volume, but will disable real-time file classification.
To prevent File Server Resource Manager from creating a change journal on some or all volumes when the service starts, use the following steps:
Stop the SRMSVC service. For example, open a PowerShell session as an administrator and enter Stop-Service SrmSvc .
Delete the USN journal for the volumes you want to conserve space on byВ using the fsutil command:
For example: fsutil usn deletejournal /d c:
Open Registry Editor, for example, by typing regedit in the same PowerShell session.
Navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrmSvc\Settings
To optionally skip change journal creation for the entire server (skip this step if you want to disable it only on specific volumes):
- Right-click the Settings key and then select New >DWORD (32-bit) Value.
- Name the value SkipUSNCreationForSystem .
- Set the value to 1 (in hexidecimal).
To optionally skip change journal creation for specific volumes:
Get the volume paths you want to skip by using the fsutil volume list command or the following PowerShell command:
Here’s an example output:
Back in Registry Editor, right-click the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrmSvc\Settings key and then select New > Multi-String Value.
Name the value SkipUSNCreationForVolumes .
Enter the path of each volume on which you skip creating a change journal, placing each path on a separate line. For example:
Registry Editor might tell you that it removed empty strings, displaying this warning that you can safely disregard: Data of type REG_MULTI_SZ cannot contain empty strings. Registry Editor will remove all empty strings found.
Start the SRMSVC service. For example, in a PowerShell session enter Start-Service SrmSvc .
Windows Server 2012 File Server Resources Manager (FSRM) Installation & Configuration — Block Saving Of Specific File Types on Windows Server
Written by Administrator. Posted in Windows 2012 Server
The Windows Server 2008 first carried FSRM or Fie Server Resources Manager, which allowed administrators to define the file types that users could save to file servers. Windows FSRM has been a part of all succeeding Windows Servers, and administrators can now block defined file types from being uploaded to a specific folder or to an entire volume on the server.
Before you can begin blocking file extensions, you may need to install and configure FSRM on your Windows Server 2012 R2. Installation of FSRM can be achieved through the Server Manager GUI or by using the PowerShell console.
This article will examine the installation of FSRM using both methods, Server Manager GUI and Windows Server PowerShell console, while providing all necessary information to ensure a successful deployment and configuration of FSRM services.
FREE Hyper-V & VMware Backup: Easy to use — Powerful features — Just works, no hassle: It’s FREE for Firewall.cx readers! Download Now!
Installing FSRM on Server 2012 using the Server Manager GUI
Assuming you are logged in as the administrator, start with the Server Manager – click on the second icon from left on the bottom toolbar on the desktop as shown below:
Figure 1. Launching the Server Manager Dashboard
This brings up the Server Manager Dashboard. Proceed to the top right hand corner and click on Manage, then click on Add Roles and Features.
This opens the Add Roles and Features Wizard, where you need to click on Server Selection. Depending on how many servers you are currently managing, the right hand side will show one or multiple servers in the pool. Select the file server on which you want to install FSRM, and click on Next to proceed.
Figure 3. Selecting a Server to add the FSRM role
The next screen shows the server roles that you can install on the selected server. On the right hand side, locate File and Storage Services and expand it. Locate the File and iSCSI services and expand it. Now, locate the File Server Resource Manager entry.
Figure 4. Selecting the File Server Resource Manager role for installation
Click on the check box in front of the entry File Server Resource Manager. This will open up the confirmation dialog box for the additional features that you must first install before installing FSRM.
Figure 5. Confirming the installation of additional role services required for FSRM
Click on Add Features and you are all set to install FSRM, as the check box for File Server Resource Manager now has a tick mark (shown below).
Figure 6. Back to the Server Role installation – Confirming FSRM Role Selection
Clicking on Next allows you to Select one or more features to install on the selected server. We don’t need to add anything here at this stage, so click Next to go to the next step.
This brings up a screen asking you to Confirm installation selections. This is the stage where you have the last chance to go back and make any changes, before the actual installation starts.
Figure 7. Confirm installation selections
Click on Install to allow the installation to commence and show the progress on the progress bar on the Results screen. Once completed, you can see the Installation successful on … under the progress bar.
Figure 8. Completion of FSRM role installation
Click on Close to exit the process.
To check if the FSRM has actually started running, go to the Server Manager Dashboard and click on File and Storage Services on the left hand side of the screen.
Figure 9. Server Manager Dashboard
The Dashboard now shows all the servers running under the File and Storage Services. Go down to Services and you will see FSRM running with an automatic start up.
Figure 10. File and Storage Services – Confirming FSRM Service
Installing FSRM on Server 2012 using the PowerShell Console
This is a comparatively easier and faster process compared to the GUI method.
To invoke the PowerShell, click the third icon from left on the bottom toolbar on the desktop.
Figure 11. Launching Windows PowerShell
This will open up a console with an administrative level command prompt. At the command prompt, type:
Figure 12. Executing PowerShell command to install FSRM
A successful installation will be indicated as True , under the Success column as shown above.
FREE Hyper-V & VMware Backup: Easy to use — Powerful features — Just works, no hassle: It’s FREE for Firewall.cx readers! Download Now!
Configuring File Screening
Invoke FSRM from the Tools menu on the top right hand corner of the Server Manager Dashboard.
Figure 13. Running the File Server Resource Manager component
The File Server Resource Manager screen opens up. On the left panel, expand the File Screening Management and go to File Groups. The central panel shows the File Groups, the Include Files and the Exclude Files in three columns.
Under the column File Groups, you will find file types conveniently grouped together. The column Include Files lists all file extensions that are included in the specific file group. For a new server, the column Exclude Files is typically empty.
Figure 14 – File Groups, Include File and Exclude Files
On the left panel, go to File Screen Templates and click on it. The central panel shows predefined rules that apply to folders or volumes.
Figure 15. File Server Resource Manager — File Screen Templates
For instance, double-click on Block Image Files in the central panel. This opens up the File Screen Template Properties for Block Image Files. Here you can define all the actions that the server will take when it encounters a situation where a user is trying to save a file belonging to the excluded group.
Figure 16. FSRM — File Screen Template Properties for Block Image Files
You can choose to screen the specified file type either actively or passively. Active screening disallows users from saving the specified file group. With passive screening, users are not prevented from saving the files while the administrator can monitor their actions.
The server can send from one to four basic alerts when it encounters an attempt to save a forbidden file. The server can send an Email message to the administrator, create an entry in the Event Log, run a specified Command or Script and or generate a Report. You can set up the details for each action on individual tabs. When completed, exit by clicking on OK or Cancel.
To edit the existing template or to create a new one based on the chosen template, go to the File Screen Templates and in the central panel, right-click on the predefined template you would like to edit. From the Actions menu on the right panel, you can either Create File Screen Template or Edit Template Properties.
Figure 17. FSRM – Creating or editing a File Screen Template
Clicking on Create File Screen Template opens up a dialog where you can click on Browse to select a folder or volume on which the new rule would be applied. Under How do you want to configure file screen properties? You can either Derive or Create the file screen properties. Click on Create to allow the new file screen rule to appear in the central panel.
Figure 18. FSRM — Creating a File Screen
Creating Exceptions
Exceptions are useful when you want to allow a blocked file type to be saved in a specific location. Go to the left panel of the FSRM screen and right-click on File Screens.
Figure 19. FSRM – Creating a File Screen Exception
From the menu on the right panel, click on Create File Screen Exception. On the menu that opens up, click on Browse to select a folder or volume on which the new rule would be applied and select the group you would like to exclude under the File groups. Click OK and complete the process.
Figure 20. FSRM – File Screen Exception settings and options
This article showed how to we can use Windows Server File Server Resources Manager (FSRM) to block file types and extensions from being uploaded or saved to a directory or volume on a Windows 2012 R2 server. We explained how to perform installation of FSRM via GUI interface and Powershell, and covered the creation or editing of File Screen Templates used to block or permit access for specific files.