Automatic classification by using File Classification Infrastructure has been enhanced in Windows Server in the following ways:. Continuous classification Configure File Classification Infrastructure to classify files a few seconds after they are created or modified on the file server, without having to wait for the next scheduled time for the classification to occur. Windows PowerShell classifier Classify a file automatically by running a Windows PowerShell script that determines the file classification.
The Windows PowerShell classifier makes it easier to implement custom classification logic that is specific to your organization. For example, you can classify a file based on who last created or modified the file. Enhanced content classifier Specify minimum and maximum occurrences of a string or regular expression.
For example, you could classify a file that contains more than ten social security numbers as having personally identifiable information. Dynamic name space for classification rules Specify the type of information that a folder contains, such as application data, group data, or user data, and then configure classification rules based on the type of information in which you want these to operate. On the Classification tab of the file properties in Windows Server , File Classification Infrastructure adds the ability to manually classify files.
You can also classify folders so that any file added to the classified folder will inherit the classifications of the parent folder. Manual classification gives users and content owners the ability to classify their files and folders by using the properties sheet of that file or folder.
Continuous file management tasks Configure file management tasks to run a few seconds after files are created or modified on a file server when classification properties are defined as a condition in the file management task. You cannot configure the file management tasks to be continuous if you have configured a notification or if a fixed schedule is assigned. Dynamic name space for file management tasks Specify the type of information that a folder contains, such as application data, group data, or user data, and then configure file management tasks based on the type of information in which you want these to operate.
Access-denied assistance enables you to customize the access-denied error message that is displayed when a user running Windows 8 does not have access to a file or folder on a file server. You can configure the error message so that the user can request access to the file directly from the dialog box.
You can also specify the user group that is sent the access request by using File Server Resource Manager. Access-denied assistance can be configured by using Group Policy or by using the File Server Resource Manager console on each file server.
You can also customize the error message per file server or you can have a separate error message for each file share on the file server. For more information about configuring access-denied assistance see Scenario: Access-Denied Assistance. Access-denied assistance makes it easier for users to troubleshoot access issues for users so they can get access to the file and folders they need in a more efficient way. The command-line tools still exist in the product, but all management tasks can be accomplished by using Windows PowerShell cmdlets.
File classification infrastructure - automates the process behind classification, so administrators can have a more effective and deeper understanding of data. To install it, you must open the Server Manager and select the Add Roles and Features command from the Administration menu.
File Server Resource Manager is part of the file and storage service role. This role is installed by default, but File Server Resource Manager is not installed. Most organizations that use File Server Resource Manager use this tool for quota management. If you expand the Quota Management container of the console, you will see that it contains two sub-containers - Quota and Quota Template.
By default, there is no storage quota. It's a small point, but we also added the ability to disable change journals in Windows Server, version The Resilient File System isn't supported. Use File Classification Infrastructure with the Dynamic Access Control scenario to create a policy that grants access to files and folders based on the way files are classified on the file server.
Create a file classification rule that tags any file that contains at least 10 social security numbers as having personally identifiable information. Create a megabyte quota for each user's home directory and notify them when they are using megabytes.
Schedule a report that runs every Sunday night at midnight that generates a list of the most recently accessed files from the previous two days. This can help you determine the weekend storage activity and plan your server downtime accordingly.
Starting with Windows Server, version , you can now prevent the File Server Resource Manager service from creating a change journal also known as a USN journal on volumes when the service starts.
This can conserve a little bit of space on each volume, but will disable real-time file classification. To prevent File Server Resource Manager from creating a change journal on some or all volumes when the service starts, use the following steps:.
0コメント