Microsoft Azure AZ-800 — Section 18: Configure and manage Windows Server file shares Part 2
139. Configure file screens
OK, so, I want to take a look now at the file server resource manager and get into a feature called file screens.
Now this a nice little feature that we get on our file servers that allows us to control whether or not a user can store certain types of files inside of a folder.
So let’s take a look at that now. Here we are on N.Y.C. Server one, and we’re just going to open up server manager. We’ve installed the followsr resource manager through ADM’s and features already, So, we’re going to click tools and we’re going to go to file server resource manager.
OK.
So once files from resource managers open, we can expand right here where it says file screening management.
OK, and we got a couple of different things here we can do. We can create a false screen, which maybe this just like a one and done file screen I’m going to create and start using or I can actually use templates. There are actually pre-built templates that Microsoft has already included, or I could actually create my own template and apply that to a file screen. You’ve also got what are called file groups.
Now I File Group is going to define the types of files that we perhaps might want to screen.
So you’ll see there’s a bunch of those in there audio and video backup files, compressed files, emails, execuTables, images, office files, system files, temporary files, text files and web page files. Of course, you could right click that, click create a file screen group, give it a name, and you can specify certain file types, perhaps that you do not want to be utilized. Of course, you know, again, there’s quite a few here that are typical ones that you’d want to do, but if you wanted to create one, just give it a name and then you can specify what you want to add here. They tell you here to set a set of files, type of file name and click Add. You can do start audie axes, you know you can put in. You can use wild cards essentially for that.
So, if I wanted to prevent, you know, a specific file based on a certain name, I could do that right? So that point, I could create that and create myself file group. And I could apply that through file screen template.
OK.
So, let’s say I was going to call this sales files. All right.
So maybe I want to define this as the word sales start star. All right, click Add.
So any file that has the name sales in it would be, you know, would be included in this if I wanted. I could also specify something to exclude as well. If I wanted, click OK, got myself a file screen group now that I could use. All right.
So let’s go over here to file screen templates. Here’s the existing templates that are available. All right. And I’m going to right click file screen template, click Create. And I’m just going to call this sales template because perhaps, maybe we are setting this up specifically for salespeople, and we’re not going to allow certain types of files to be in their focus.
So, if we want, we can do active screening or passive screening. Active screening means that no unauthorized files at all will be allowed.
OK. Passive means we will allow files to basically be placed in there that we are looking for, but it’s just going to log that they is just going to use monitoring on it.
OK.
So from there, if I want, I can choose these groups. I’m going to choose the sales, one that I created and then just for fun, why don’t we not allow audio and video as well? OK, maybe no execuTable files either stored in that folder, so those are the ones we’ll go with. All right. We can also have email messages set up.
So have it. Send an email. You do have to have an email. You have to have email services set up so that it can actually send email. But you can actually configure that to where an email can be sent if you want. You also have a log event if you want. By the way, here’s the message It says that you don’t have some TV set up. If you want to do that, you can click Yes, and it’ll allow you to you. Basically, you can go and configure the SMB service, but you can have send a message and do Event Viewer. You can actually have it run a command if it notices something.
So, I could actually write a script if I want, which is kind of neat. And then here is a generating report.
So you have this little thing here called storage reports, and it can generate a little report right there for you.
OK.
So once you’ve got that the way you want, you can click OK, still says, Hey, there’s no setup configured. That’s fine. All right. And so at that point, you know, it’s given me the option to basically continue. If you want to set up the SMTP and you just right click here, go to configure options and you’ll see right here where you can configure that.
So you do have to have a simple mail transfer protocol server like exchange or something like that to send emails out through which you can configure that there. All right.
So once you’ve got your template set up, I’ve just created sort of so simple that I can go over here to file screens, right click to create a file screen and specify the path. Maybe, it’s going to be the sales data folder that I’ve got right there, sales data. And then from there, I can choose my cell’s template that I’ve selected and click to create the file screen, and I officially got the file screen created.
Now, just to test this out, let’s go to File Explorer here, and we’re just going to create a fake MP3 file. All right, I’ll call it Song three, because I’m so original with my naming.
So, it’s not really an empty three file, but we’re going to make, you know, we’re just going to make the system think it is. And let’s try copying this fake inventory file into the sales data folder and see what happens.
So as you can see, it will not let me do that. As you can see, it is preventing it. All right. And so that’s really neat. That gives us the ability to kind of check and see, you know, see what’s going on. We can also go here to generate reports if we want. We can have like file screen auditing, duplicate files, file screens by groups, by owner, and we can actually have reports that get generated that we can take a look at as far as being able to get a get a feel for the stuff that users are doing now. When you do this, if you just try clicking OK, you’ll get an error, you actually need to go over here to scope. Specify OK, include all the folders that store the following kinds of datactive Application Backup Group Files User files click add, though, and we’re going to be going to say C Drive. And let’s just point to the sales data folder. All right, and then delivery how you want to deliver that kind of an email if I’ve got email set up. Else it’s just going to it’s just going to generate, OK.
So, so you’ve chosen to generate set a start for now, depending on the types of reports and volumes and folders reported on, this can take a few minutes.
So but it is going to take a little while, you say, generate in the background, and eventually it will get the report and you’ll be able to take a look at it and see everything that’s going on. But ultimately, and I encourage you to try that out, if you got access to a server, give it a shot. Take a look at the report and you’ll be able to see what’s going on.
140. Configure File Server Resource Manager (FSRM) quotas
So another great feature that we have with file server resource manager is the ability to put quotas on our different folders now. Quotas is something that’s been around for a long time in the Windows world. Microsoft first introduced something called disk quotas, which you could you could do on NTFS Partition if you right click the C drive, for example, but a properties, you can click quotand turn this on.
Now, the disadvantage to this doing quotas through this going to put quotas on the entire C drive and you can put a default limit if you want. You can set specific quotas for certain individuals through this menu, but ultimately it’s going to set it for the entire drive.
So, if I a resource manager, I’ve got a lot more flexibility. I can actually set it on individual folders.
So to do that, I’m going to open up server manager. Go to ols and I’m going to open up the file server resource manager tool. And then from there, you’ll notice that I have an option here that says quota management.
So this where I can set quotas at so, I can go right here to quota templates. And this where you’ll notice there are some existing templates that are available that I could use 10 Gig Hunter gig to gig so on and so forth.
Some are hard quotas, some are soft quotas. All right, so let’s take a look at that and figure out what all that means.
So, we’re going to right click quota templates and click New to create a new template. And then you’ll notice that we have these are the ones I can kind of copy if I want to copy these existing ones, I could find to create a new one I can so, I can give it a name, give it a description. I can set the size if I want, you know, whatever. I want that limit to be right.
So, let’s say I want to do like a 500 mag limit.
OK, so, I could do a hard quota part. Quotas do not allow users to exceed the quota limit, so, they can’t go beyond 500. A soft quota is going to let them go beyond it.
So a user basically, you know, their limit will be 500, but it’ll let make see that limit. And of course, we can log that that occurred if we want.
OK, but I’m going to do a hard quotand then I can also set notifications.
So, if I click add here, I can have it. Send an email. And of course, you have to have SMTP configured in all that to do that. You can have an event log message, which is what I’m going to do, and you can also have a command. You get a report generated, generate report and then also right here generate notifications when user reaches.
So this the percentage.
So, when they reach 85 percent, you could set that to what you want, obviously. But once I got that, I was going to click, OK, I got my little warnings that 85 percent OK, and I’ll just give this a name and do something generic will say 500 movie limit. All right, click OK, we’ve now created our template, so, we haven’t applied this to anything. We basically just created a template. All right.
So, if we come back over here? We can right click right here, right click see, create quota. And we can specify the path, so maybe I’m going to do the sales folder here, so, we’ll just kind of go down here and select sales datand then create the quote on that path or auto apply template and create quotas on existing and new supporters. It’ll it’ll basically make it or it will is people are creating folders that can auto apply templates, but we’re just going to say create quote on path. And then it says, how do you want to configure the quota? So, we’re going to set the 500 Meg limit, which is the one I just created.
OK, if we want to do custom quota, we could. We’ll click Create at that point. We’ve now applied this quotand I’m not going to actually copy a bunch of data in there. But you’ll notice that if you tried to add that if you want to, you can try doing that and it’ll stop you at that 500 limit because I actually set a I actually set the hard code on it. But that’s how you can configure quotas. Very easy to do, very user friendly and very, very simple for you just to jump right in and set it up.