Windows Server Role – File Server Resource Manager (FSRM)

From Notes_Wiki

Windows Server Role – File Server Resource Manager (FSRM)

Overview

The File Server Resource Manager (FSRM) is a Windows Server role that helps administrators manage storage by setting folder quotas, monitoring usage, and controlling access levels.

---

1. Server and Domain Configuration

  • Installed Windows Server and joined it to the Active Directory (AD) domain.
  • Installed the File Server Resource Manager (FSRM) role:
 * Go to Server Manager → Add Roles and Features → File and Storage Services → File Server Resource Manager.

---

2. Active Directory Setup

  • On the AD Server, created three security groups:
 * Group1 – Read Only  
 * Group2 – Read and Write  
 * Group3 – Full Control  
  • Added three different domain users, one user to each group.

---

3. File Server Folder and Share Configuration

  • On the File Server, created a new folder on a separate or existing drive (for example: D:\ShareFolder).
  • Right-click the folder → Properties → Security → added the three AD security groups:
 * Group1 → Read only  
 * Group2 → Read and Write  
 * Group3 → Full Control  
  • Opened Server Manager → File and Storage Services → Shares → New Share.
  • Selected SMB Share – Quick, chose the folder location, and finished the wizard.
  • Removed the Everyone group from permissions.
  • Ensured only the three AD groups have access as per defined permissions.

---

4. Configure Quota in FSRM

  • Open File Server Resource Manager → Quotas → Create Quota.
  • Selected the shared folder path (e.g., D:\ShareFolder).
  • Set the quota limit to 1 GB.
  • Chose a hard quota type (to prevent users from exceeding the limit).
  • Applied and saved the configuration.

---

5. Testing and Verification

Permission Testing

Group/User Access Level Test Result
Group1 Read Only Can view files, cannot edit or delete
Group2 Read and Write Can create and modify files, cannot delete
Group3 Full Control Can create, edit, and delete files

Quota Testing

  • Tried to copy a file larger than 1 GB → Operation blocked.
  • Copied files below 1 GB → Operation successful.

---

Result

  • Folder permissions were successfully applied based on Active Directory groups.
  • Quota limit of 1 GB enforced correctly using FSRM.
  • Access restrictions worked as expected for all three user groups.

---

Summary

The FSRM configuration ensures:

  • Controlled file access based on group permissions.
  • Effective storage management using quota policies.
  • Centralized administration through domain-integrated security groups.