Добавил:
Upload Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:

20411B-ENU-TrainerHandbook

.pdf
Скачиваний:
237
Добавлен:
01.05.2015
Размер:
16.48 Mб
Скачать

Administering Windows Server® 2012 10-13

 

 

 

 

 

 

 

Report

Description

 

MCT

 

 

 

 

 

 

 

Most Recently

This report lists files that are accessed within a specified number of days. Use

 

 

 

Accessed Files

this report to identify frequently used data that must be kept highly available.

 

 

 

 

 

 

Quota Usage

This report lists quotas for which the quota usage is higher than a specified

USE

 

 

percentage. Use this report to identify quotas with high usage levels so that

 

 

you can take appropriate action.

 

 

 

 

 

 

 

 

 

 

Configuring Report Parameters

.ONLY

Except for the Duplicate Files report, all reports have configurable report parameters that determine

the content in the report. Parameters vary with the type of report. For some reports, you can use report

parameters to select the volumes and folders on which to report, set a minimum file size to include, or

restrict a report to files owned by specific users.

Saving Reports

 

 

Regardless of how you generate a report, or whether you choose to view the report immediately, the

report is saved on the disk. Incident reports are saved in the Dynamic HTML (DHTML) format. You can

USESTUDENT

save scheduled and on-demand reports in DHTML, HTML, XML, CSV, and text formats.

Scheduled reports, on-demand reports, and incident reports are saved in separate folders within a

designated report repository.

 

 

 

 

By default, the reports are stored in the subdirectories of the %Systemdrive%\StorageReports\ folder. To

change the default report locations, in the File Server Resource Manager Options dialog box, on the

 

 

 

Report Locations tab, specify where to save each type of storage report.

 

 

 

What Is a Report Task?

 

 

 

A report task is a set of storage management

 

 

 

 

 

 

 

 

reports that run based on a schedule.

 

 

 

 

The report task specifies which reports to

 

 

 

 

generate, what parameters to use, and which

 

 

 

 

volumes and folders to report on. The report task

 

 

 

 

also reports on how often to generate the reports,

 

 

 

 

and in which file formats to save them.

 

 

 

 

When you schedule a set of reports, the

 

 

 

 

reports are saved automatically in the report

 

 

 

 

repository. You can also have the reports emailed

 

 

 

 

automatically to a group of administrators.

 

 

 

 

 

 

 

 

You can schedule report tasks by using the following steps from within FSRM.

PROHIBITED

1. Click the Storage Reports Management node.

2. Right-click Storage Reports Management, and then click Schedule a New Report Task. You also

 

can click Schedule a New Report Task in the Actions pane.

 

Note: To minimize the impact of report processing on server performance, generate

 

multiple reports on the same schedule so that the data is gathered only once.

 

 

 

 

10-14 Optimizing File Services

MCT

 

 

 

 

 

 

Generating On Demand Reports

 

 

During daily operations, you may want to generate reports on demand to analyze the different aspects of

 

 

the current disk usage on the server. Before the reports are generated, current data is gathered.

USE

When you generate reports on demand, the reports are saved in the report repository, but no report task

is created for later use. You can view the reports immediately after they are generated, or you can send

the reports to a group of administrators by email.

To generate reports on demand:

1. Click the Storage Reports Management node.

 

 

2. Right-click Storage Reports Management, and then click Generate Reports Now (or in the Actions

 

 

pane, click Generate Reports Now).

ONLY.

 

 

Note: When generating an on-demand report, you can wait for the reports to be

 

 

generated and then immediately display them. If you choose to open the reports immediately,

you must wait while the reports generate. Processing time varies, depending on the types of

reports and the data scope.

STUDENT

Test a file screen.

Demonstration: Using FSRM to Manage Quotas and File Screens, and to

 

 

Generate On-Demand Storage Reports

 

 

In this demonstration, you will see how to:

 

 

Create a quota.

 

 

Test a quota.

 

 

• Create a file screen.

USE

Generate a storage report.

 

 

Demonstration Steps

Create a quota

1.Sign in to LON-SVR1 as Adatum\Administrator with the password Pa$$w0rd.

2.Open Server Manager.

3.Open the File Server Resource Manager console.

4.Create a quota based on the 100 MB Limit on the E:\Labfiles\Mod10\Data folder.

Test a quota

1.

Open Windows PowerShell.

PROHIBITED

 

2.

Create a new, 130 MB file in the E:\Labfiles\Mod10\Data folder by using the following command:

 

 

 

 

 

fsutil file createnew largefile.txt 130000000

 

 

 

 

3.

Close Windows PowerShell.

 

Create a file screen

• In File Server Resource Manager, create a new file screen based on the Block Image Files file-screen template for E:\Labfiles\Mod10\Data.

Administering Windows Server® 2012

Test a file screen

1.Open Microsoft Windows Explorer.

2.Navigate to E:\Labfiles\Mod10.

3.Create a new bitmap (.bmp) image named testimage.

4.Copy the testimage, and then paste it into the E:\Labfiles\Mod10\Data folder.

5.View and close the error window.

6.Close the Windows Explorer window.

Generate a storage report

1.Generate an on-demand report for Large Files on drive E.

2.View and close the html report.

3.Close File Server Resource Manager.

10-MCT15 USEONLY

STUDENT . PROHIBITED USE

10-16 Optimizing File Services

Lesson 3

MCT

Implementing Classification and File Management Tasks

 

Most applications manage files based on the directory in which they are contained. This leads to complicated file layouts that require attention from administrators. Such layout can also lead to frustration

among the users. In Windows Server 2012, Classification Management and File Management tasks enable

USE

administrators to manage groups of files based on various file and folder attributes. With Classification

Management and File Management tasks, you can automate file and folder maintenance tasks such as

.ONLY

cleaning up stale data, or protecting sensitive information.

In this lesson, you will learn how Classification Management and File Management tasks work together to

make it easier for you to manage and organize the files and folders on your servers.

Lesson Objectives

After completing this lesson, you will be able to:

Describe classification management.

Describe classification properties.

PROHIBITEDUSESTUDENT

• Describe a classification rule.

Explain how to configure classification management.

 

• Identify considerations for using file classification.

 

• Describe file management tasks.

 

• Explain how to configure file management tasks.

 

What Is Classification Management?

 

To reduce the cost and risk associated with data

 

 

 

 

management, the File Classification infrastructure

 

 

uses a platform that allows administrators to

 

 

classify files and apply policies based on that

 

 

classification. The storage layout is unaffected

 

 

by data management requirements, and the

 

 

organization can adapt more easily to a changing

 

 

business and regulatory environment.

 

 

Classification Management is designed to ease the

 

 

burden and management of data that is spread

 

 

out in your organization. Using Classification

 

 

Management, you can classify files in a variety of

 

 

 

 

ways. In most scenarios, you perform classification manually. In Windows Server 2012, the File

 

Classification Infrastructure feature allows organizations to convert these manual processes into

 

automated policies. You can specify file management policies based on a file’s classification, and can

 

apply corporate requirements for managing data based on business value. You can also modify the

 

policies easily, and can use tools that support classification to manage files.

 

1.Define classification properties and values, which can be assigned to files by running classification MCT rules.

2.Create, update, and run classification rules. Each rule assigns a single predefined property and valueUSE to files within a specified directory, based on installed classification plug-ins.overwrite existing classification values or add the value to properties that support multiple values.When

What Are Classification Properties?

Classification properties are used to assign values

 

 

ONLY.

 

 

to files. There are many property types from which

 

 

you can choose. You can define these properties

 

 

based on the needs of your organization.

 

 

Classification properties are assigned to files that

 

 

 

use classification rules, which are discussed in the

 

 

 

next topic.

 

 

 

 

The following table defines the available property

 

 

 

types, and the policy that is applied when a file is

 

 

 

reclassified:

 

 

 

 

 

 

 

 

 

 

 

 

 

Property type

Description

 

 

 

 

 

 

 

 

 

Yes/No

A Boolean property that can have a value of either YES or NO. When multiple

 

 

values are combined, a NO value overwrites a YES value.

STUDENT

 

 

 

Date-Time

A simple date and time property. When multiple values are combined,

 

 

 

conflicting values prevent reclassification.

 

 

 

 

 

 

Number

A simple number property. When multiple values are combined, conflicting

USE

 

values prevent reclassification.

 

 

 

Multiple Choice

A list of values that can be assigned to a property. More than one value can

 

 

List

be assigned to a property at a time. When multiple values are combined, each

 

value in the list is used.

 

 

 

 

 

 

Ordered List

A list of fixed values. Only one value can be assigned to a property at a time.

 

 

 

When multiple values are combined, the value highest in the list is used.

 

 

 

 

 

 

String

A simple string property. When multiple values are combined, conflicting

 

 

 

values prevent reclassification.

 

 

 

 

 

 

Multi-string

A list of strings that can be assigned to a property. More than one value can

 

 

 

be assigned to a property at a time. When multiple values are combined, each

 

value in the list is used.

PROHIBITED

 

 

 

 

 

 

10-18

Optimizing File Services

What Is a Classification Rule?

 

MCT

A classification rule assigns a Classification

 

 

 

 

USE

Property to a file system object. A classification

 

 

rule includes information detailing when to assign

 

 

a classification property to a file.

 

 

Key Classification Rule Properties

 

 

To define the behavior of a classification rule, ask

 

 

 

 

 

yourself the following questions:

 

 

 

• Is the rule enabled? On the classification

 

 

 

 

rule Properties page, on the Rule Settings

 

 

 

 

tab, the Enabled check box allows you to

 

 

 

 

specifically disable or enable the classification

 

 

 

 

 

 

ONLY.

 

rule.

 

What is the scope of the rule? On the Rule Settings tab, the

Scope parameter allows you to select a

 

 

folder or folders to which the classification rule will apply. When the rule is run, it processes and

 

 

attempts to classify all file system objects within this location.

 

 

• What classification mechanism will the rule use? On the classification rule Properties page, on the

 

 

rule’s Classification tab, you must choose a classification method that the rule will use to assign the

 

 

classification property. By default, there are two methods from which you can choose:

 

 

o Folder Classifier. The folder classifier mechanism assigns properties to a file based on the file’s

 

 

folder path.

 

 

 

o Content Classifier. The content classifier searches for strings or regular expressions in files. This

 

 

means that the content classifier classifies a file based on the textual contents of the file, such as

 

 

whether it contains a specific word, phrase, numeric value, or type.

 

• What property will the rule assign? The main function of the classification rule is to assign a propertySTUDENT

 

to a file object based on how the rule applies to that file object. On the Classification tab, you must

USE

 

specify a property and the specific value that the rule will assign to that property.

• What additional classification parameters will be used? The core of the rule’s logic lies in the

 

 

 

 

additional classification parameters. Clicking the Advanced button on the Classification tab opens the Additional Classification Parameters window. Here, you can specify additional parameters— including strings or regular expressions—that if found in the file system object, will cause the rule to apply itself. For example, this parameter could be the phrase “Social Security Number” or any number with the format 000-00-000. If this parameter is found, then the classification parameter will apply a YES value for a Confidential classification property to the file. This classification could then be leveraged to perform some tasks on the file system object, such as moving it to a secure location.

A classification parameter can be one of the following three types:

RegularExpression. Match a regular expression by using the Microsoft .NET syntax. For example,

PROHIBITED

 

\d\d\d will match any three-digit string.

StringCaseSensitive. Match a case-sensitive string. For example, Confidential will only match Confidential’ and not confidential or CONFIDENTIAL.

String. Match a string, regardless of case. Confidential will match Confidential, confidential, and CONFIDENTIAL.

Administering Windows Server® 2012 10-19

Classification Scheduling

 

You can run classification rules in two ways: on-demand, or based on a schedule. Either way you choose,

each time you run classification, it uses all rules that you have left in the Enabled state.

MCT

 

Configuring a schedule for classification allows you to specify a regular interval at which file classification

rules will run, ensuring that your server’s files are regularly classified and up to date with the latest

USE

classification properties.

 

 

Demonstration: How to Configure Classification Management

ONLY

This demonstration shows how to:

 

 

Create a classification property.

 

Create a classification rule.

 

Modify the classification schedule.

.

 

 

Demonstration Steps

 

1.

Open File Server Resource Manager, and expand the Classification Management node.

 

2.

Using the Classification Properties node, create a new Classification Property named

 

 

Confidential, with the Yes/No property type.

 

1.

Using the Classification Rules node, create a new Classification Rule named Confidential Payroll

 

Documents.

STUDENT

2.

Configure the rule to classify documents with a value of Yes for the Confidential classification

 

property, if the file contains the string expression PAYROLL.

 

 

1.Create a classification schedule that runs every Sunday at 8:30 AM. USE

2.Using the Classification Rule node, manually run Classification With All Rules Now, and view the report.Modify the Classification Schedule

Considerations for Using File Classification

Although Classification Management provides a powerful mechanism to catalog, categorize, and classify your file system objects, you should consider certain factors when dealing with Classification Management.

How Classification Properties Are Stored

Classification properties are stored in an alternate data stream, which is a feature of NTFS. If a file moves within NTFS, the alternate data streams move with the file, but they do not appear in the

PROHIBITED

10-20 Optimizing File Services

file’s contents. In Microsoft Office applications, the classification properties are also stored within file

MCT

formats as custom document properties or server document properties.

 

How Movement Affects Classification Properties

 

When moving a file from one NTFS file system to another, if you use a standard mechanism such as Copy or Move, the file retains its classification properties. However, if you move a file to a non-NTFS file system,

regardless of how you move the file, file classification properties are not retained. If the file is the product

 

of a Microsoft Office application, then the classification properties remain attached, regardless of how the

file is moved.

USE

 

Classification Management Process in Windows Server

Classification properties are available only to servers running Windows Server 2008 R2 or newer. However, Microsoft Office documents will retain classification property information in Document Properties, which is viewable regardless of the operating system being used.

Conflicting Classification Rules

ONLY.

At times, classification rules can conflict. When this happens, the file classification infrastructure will

 

attempt to combine properties. The following behaviors will occur when conflicting classification rules

 

arise:

STUDENT

• For Yes or No properties, a YES value takes priority over a NO value.

For other property types, an error occurs.

For ordered list properties, the highest property value takes priority.

 

• For multiple choice properties, the property sets are combined into one set.

 

• For multiple string properties, a multistring value is set that contains all the unique strings of the

 

 

individual property values.

 

Classification Management Cannot Classify Certain Files

File Classification Infrastructure will not identify individual files within a container, file such as a .zip or .vhd

file. In addition, File Classification Infrastructure will not allow content classification for the contents of

USE

encrypted files.

What Are File Management Tasks?

File management tasks automate the

 

 

 

 

process of finding subsets of files on a server,

 

 

and then applying simple commands to them

 

 

on a scheduled basis. Files are identified by

 

 

classification properties that have been assigned

 

 

to the file by a classification rule.

 

 

File management tasks include a file expiration

 

 

command, and you can also create custom tasks.

 

 

You can define files that will be processed by a file

 

 

management task through the following

 

 

properties:

 

 

Location

PROHIBITED

Classification properties

Creation time

 

 

 

 

 

Administering Windows Server® 2012

10-21

Modification time

 

MCT

 

 

Last accessed time

 

 

File name

 

USE

You also can configure file management tasks to notify file owners of any impending policy that will be

applied to their files.

 

File Expiration Tasks

 

File expiration tasks automatically move all files that match certain criteria to a specified expiration

 

.ONLY

directory, where an administrator can then back up those files and delete them. When you run a file

 

expiration task, a new directory is created within the expiration directory. The new directory is grouped

by the server name on which the task was run, and it is named according to the name of the file

 

management task and the time it was run. When an expired file is discovered, it is moved into the new

directory, while preserving its original directory structure.

 

Custom File Management Tasks

 

 

 

 

 

Expiration is not always a desired action to be performed on files. File management tasks allow you to run

custom commands. Using the Custom Commands dialog box, you can run an executable file, script, or

STUDENT

other custom command to perform an operation on the files within the scope of the file management

task.

 

 

 

Note: You configure custom tasks by selecting the Custom type on the Action tab of the

 

 

 

 

Create File Management Task window.

 

Demonstration: How to Configure File Management Tasks

 

In this demonstration, you will see how to:

 

 

 

 

 

Create a file management task.

 

USE

• Configure a file management task to expire documents.

 

Demonstration Steps

 

Create a File Management Task

 

 

 

 

 

1. Open File Server Resource Manager, and then expand the File Management Tasks node.

 

PROHIBITED

2. Create a file management task named Expire Confidential Documents with a scope of

 

 

 

E:\Labfiles\Mod10\Data.

 

Configure a File Management Task to expire documents

 

1. On the Action tab, configure the task for file expiration to E:\Labfiles\Mod10\Expired.

 

2. Add a condition that Confidential equals Yes.

 

3. Run the File Management Task, and then view the report.

 

 

 

 

 

10-22 Optimizing File Services

Lab A: Configuring Quotas and File Screening Using FSRM

Scenario

A. Datum Corporation is a global engineering and manufacturing company with a head office based in London, United Kingdom. An IT office and data center in London support the London location and other locations. A. Datum has recently deployed a Windows Server 2012 server and client infrastructure.

Each network client within the Adatum domain is provided with a server-based home folder that is used to store personal documents or files that are works-in-progress. It has come to your attention that home folders are becoming quite large, and may contain file types such as .MP3 files that are not approved due to corporate policy. You decide to implement FSRM quotas and file screening to help address this issue.

Objectives

After completing this lab, you will be able to:

Configure FSRM quotas.

Configure file screening and generate a storage report.

Lab Setup

Estimated Time: 30 minutes

 

 

Virtual Machine(s)

20411B-LON-DC1

 

20411B-LON-SVR1

User Name

Administrator

Password

Pa$$w0rd

 

 

For this lab, you will use the available virtual machine environment. Before you begin the lab, you must complete the following steps:

1.On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager.

2.In Hyper-V® Manager, click 20411B-LON-DC1, and in the Actions pane, click Start.

3.In the Actions pane, click Connect. Wait until the virtual machine starts.

4.Sign in using the following credentials: o User name: Adatum\Administrator o Password: Pa$$w0rd

5.Perform steps 2 through 4 for 20411B-LON-SVR1.

PROHIBITED USE STUDENT .ONLY USE MCT

Соседние файлы в предмете [НЕСОРТИРОВАННОЕ]