Using File Server Resource Manager (FSRM) to protect files stored inside of documents with RMS Encryption

Home > Blogs > Windows Server 2012 > Using File Server Resource Manager (FSRM) to protect files stored inside of documents with RMS Encryption

Using File Server Resource Manager (FSRM) to protect files stored inside of documents with RMS Encryption

Like This Blog 0Rick Trader
Added by July 22, 2015

Scenario:

Corporate policy states that sales employees should not be storing customer credit card information especially credit card numbers on the file servers.  As the administrator of the file sever you have been tasked with locating any files that have what look like suspected credit card numbers based on known numerical stings.  You have automated the process and classify the card based off of vender.

It is now time to use FCI to protect the discovered files with RMS Encryption.

Let’s get started.

  1. Launch the File Server Resource Manager from the Tools dropdown menu in Server Manager.

001-File-Server-Resource-Manager

  1. To create a File Management Task either Right click on File Management Task and click on Create File Management Task or click on Create File Management Task in the Actions Panel
  1. In the Create File Management Task dialog box, on the General tab of Create Classification Rule type the desired name, click Scope tab.

003-tasks-File-Server-Resource-Manager

  1. On the Scope tab click Add, then browse to the appropriate directory structure, click OK, then click the Action

004-tasks-File-Server-Resource-Manager

  1. On the Action tab ensure RMS Encryption is chosen in the Type dropdown menu. Configure the desired permissions, then click the Notification
You may also like:  Windows Server 2012 R2 Server Manager Fails Automatic Refresh After Upgrade

005-RMS-encryption-File-Server-Resource-Manager

  1. On the Notification tab, add a desired email address is you wish an administrator to be notified when this File Management Task runs, click on the Report

006-notification-File-Server-Resource-Manager

  1. On the Report tab, verify the reports you desired to be created, click on the Condition

007-report-notification-File-Server-Resource-Manager

  1. On the Conditions tab, click Add on the Properties Condition dialog box ensure the correct Property and Operator are selected and Value is set to Yes click OK, click on the Schedule

008-property-condition-File-Server-Resource-Manager

  1. On the Schedule tab, configure the desired automatic schedule of when you would like the task to run then click

008-schedule-File-Server-Resource-Manager

Now that the File management task has been created, execute the task to verify that it works as desired.

  1. To run a File Management Task either Right click on the desired File Management Task and click on Run File Management Task or click on Create File Management Task in the Actions Panel.

009-edit-task-File-Server-Resource-Manager

  1. Choose whether to run the task in the background or wait.
You may also like:  How to install the Hyper-V role in Windows Server

010-run-management-task-File-Server-Resource-Manager

  1. Review the HTML document that shows the files that were classified with sensitive credit card information were moved to your desired directory.

Related blogs that will show you how to use the FSRM to classify files, move files and or set RMS Encryption on the discovered files:

Installing FSRM

Using File Server Resource Manager (FSRM) to Locate and Classify Sensitive Data such as Credit Card Numbers Stored Inside of Documents

Using FSRM to move documents that contain sensitive information such as Credit Card Numbers to a more secure location. 

Using FSRM to implement RMS Encryption on files that contain sensitive information such as Credit Card Numbers. (Coming soon)

Until next time … RIDE SAFE!

Rick Trader
Windows Server Instructor – Interface Technical Training
Phoenix, AZ

Videos You May Like

Windows 10 Features and Navigation – December 1, 2015

0 35 1

In this video, Windows Instructor Steve Fullmer presents the navigation and some of the new features associated with Windows 10 including Sysinternals Tools for Windows Client, Windows core concepts, exploring Process Explorer as well as some of the features that are not yet ready for prime time but will be released shortly in the future with Windows 10.

How to Reset a Windows Client Secure Channel Password

0 712 1

I’m sure you’ve ran into a situation where a user is attempting to log into a machine but they’re getting prompted that there's no secure password or a secure channel for the client computer to the Domain Controller? Or a user appears to not be getting their Group Policy Settings or their New Group Membership.

Detailed Forensic Investigation of Malware Infections – April 21, 2015

2 215 2

In this IT Security training video, Security expert Mike Danseglio (CISSP / CEH) will perform several malware investigations including rootkits, botnets, viruses, and browser toolbars.

Write a Comment

Share your thoughts...

Please fill out the comment form below to post a reply.