Shulou(Shulou.com)06/03 Report--

How to finely manage the file server part two: file masking?

©Lander Zhang focuses on on-demand IT infrastructure operation and maintenance services for foreign enterprises, and IT Helpdesk hands-on training practitioners

Https://blog.51cto.com/lander

2018-09-13 8:00

Problem description

On the file server, we generally create folders and set access permissions according to different departments, so how to allow or disallow the storage of certain files through fine settings, such as the .exe executable program extension, etc.

Solution method

Before you begin, please read one of "how to fine manage the file server: folder quota management?" "https://blog.51cto.com/lander/2174044

After managing one of the blog 3.1, we set the file screen and do not allow users to store .exe and .vbs execution files. The implementation of the masking policy for files is generally defined based on the extension of the file. first, you need to create a filegroup and list the file extensions you want to mask, and then create a file masking template. finally, the creation of file masking policy is applied to the target folder through the template.

1. Create a filegroup that is not allowed to hold .exe and .vbs execution files.

Expand File Screening Management-File Group-Create File Group... :

Enter the filegroup name Exe&VBS-add the .exe and .vbs file suffixes to be masked-OK:

Successfully create shielded .exe and .vbs filegroups:

two。 Create a file screen template.

File Screening Management-File Screen Template-Create File Screen Template... :

Enter the template name Block_Exe&VBS-check the previously created .exe and .vbs filegroups in the filegroup-Create:

The mask template has been created:

3. Apply a file blocking policy to the destination folder.

File Screening Management-File Screen Template-Create File Screen... :

Browse browse to the destination folder IT-Select the file screen template Block-Exe&VBS-Create:

The shielding policy is applied to the target folder to complete:

4. Test the effect.

Copy the suffixes .exe and .vbs to the network drive letter I on the client computer:

Prompt You need permission to perform this action to meet the blocking expectation:

If the document is useful to you, please forward it and share it!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.