Getty Images/iStockphoto

How to implement file classification in file servers

File classification with File Server Resource Manager enables admins to classify and organize data. This tutorial shows how to implement and manage file classifications.

Like many system administrator tasks, file classification begins when admins identify data -- where data is stored, what form it takes and how to categorize it. Such a project is usually beyond the scope of the IT department and requires input from day-to-day users.

Once organizations understand data classifications, they can create a design for file properties and an implementation through classification rules.

Many organizations use File Server Resource Manager (FSRM) to implement classification schemes. Schedule the application of classification rules as a form of ongoing maintenance. Many organizations find it difficult to identify specific data types and manage that data automatically. Data classification helps identify files that contain such data and automates management based on a series of classification types and associated rules.

What is file classification?

FSRM file classification enables users to specify attributes beyond author, owner, last saved and similar values. By creating classifications, administrators give their organizations more flexibility to automate file management and identify specific data within stored files and folders. For example, an organization might want to identify and manage personally identifiable information, such as Social Security and credit card numbers, or label files with values, such as Confidential.

Add the FSRM role to Windows Server to use file classification. Once installed, select the utility from the Tools menu in Server Manager. This tutorial provides steps on how to classify data with FSRM.

Configure classification properties

File classification identifies and categorizes files for policy-based file management. In the FSRM console, expand the Classification Management node to display the Classification Properties and Classification Rules nodes. Use these two nodes for most classification tasks.

Create one or more Classification Properties to manage file classifications. These properties define the criteria to classify files and folders. There are seven types:

  1. Yes/No
  2. Date-time
  3. Number
  4. Ordered list
  5. String
  6. Multi-choice
  7. Multi-string
Screenshot of creating a local classification property in File Server Resource Manager
Define the classification property to manage them with a classification tool.

Right-click on the Classification Properties node, and select Create Local Property to define a classification property and manage it via a classification rule. Fill in the name and description fields, and then select the appropriate Property type.

You have now created a classification property that can be applied to resources on the system. The next step is to use rules to apply the properties.


Configure classification rules

To define a new rule, right-click the Classification Rules node, and then select Create Classification Rule. The interface provides four tabs:

  1. On the General tab, set a name and description.
  2. On the Scope tab, define where the rule applies. You may select any number of the four provided data types or set a path to specific directories.
  3. The Classification tab enables you to configure Classification methods and select a classification property -- one of the properties you created in the Classification Properties node earlier. Note that some types require additional parameter configuration.
  4. The fourth tab is Evaluation Type, and it sets how to handle existing classifications if any exist.
Screenshot of creating a classification rule in File Server Resource Manager
The Scope tab enables users to select the file types or paths the rule applies to.

Use the Scope tab to select the file types or paths the rule applies to. If you use Windows Explorer to select a file in that path, you can see the rule in the file Properties under the Classification tab.

Right-click a classification rule to temporarily disable it or permanently delete it. You can also edit the existing rule.


Configure folder classification

FSRM provides three built-in Folder Management properties:

  1. Access-Denied Assistance Message
  2. Folder Owner Email
  3. Folder Usage

The Access-Denied Assistance Message enables administrators to provide custom text to users instead of a generic and uninformative Access Denied message. For example, the user could be directed to the service desk to request access.

Folder Owner Email enables users to view the email address of the folder owner, presumably so they can request access directly.

Screenshot of changing Folder Usage settings in File Server Resource Manager
Edit the Folder Usage settings by selecting Set Folder Management properties within the Action menu.

Folder Usage enables administrators to specify values that define the purpose of the folder and the expected content within it. These values control how the folder's contents are managed by FSRM.

To edit these settings, select one of the Folder Management properties, and then select Set Folder Management Properties from the Action menu.

You can also create your own Folder Management properties with custom criteria.

Schedule classification rules

Classification rules may run on a regular schedule. For performance reasons, it's recommended to execute the schedule during off-hours. To configure the schedule from within the Classification Management node, right-click the Classification Rules node, and select Configure Classification Schedule.

Screenshot of File Server Resource Manager options
Use the File Server Resource Manager options to schedule the new classification.

Note that the scheduling interface is considered to be part of the FSRM options. Right-click the top File Server Resource Manager node, and select Configure Options to access it.

The first choice is whether to enable the schedule. Once enabled, you may select specific times, days, weeks and months. Logging options are also available.

It's likely your organization will use the specific classifications to maintain compliance with the defined guidelines.

Right-click the Classification Rules node, and select Run Classification With All Rules Now to manually initiate classification. Be aware of a possible performance hit, especially on a busy file server.

Screenshot of implementing new classification within File Server Resource Manager
Click 'Run Classification With All' to manually implement the new classification.

Dig Deeper on Data center hardware and strategy

SearchWindowsServer
Cloud Computing
Storage
Sustainability and ESG
Close