Windows Server Role – File Server Resource Manager (FSRM)
From Notes_Wiki
Windows Server Role – File Server Resource Manager (FSRM)
Overview
The File Server Resource Manager (FSRM) is a Windows Server role that helps administrators manage storage by setting folder quotas, monitoring usage, and controlling access levels.
---
1. Server and Domain Configuration
- Installed Windows Server and joined it to the Active Directory (AD) domain.
- Installed the File Server Resource Manager (FSRM) role:
* Go to Server Manager → Add Roles and Features → File and Storage Services → File Server Resource Manager.
---
2. Active Directory Setup
- On the AD Server, created three security groups:
* Group1 – Read Only * Group2 – Read and Write * Group3 – Full Control
- Added three different domain users, one user to each group.
---
- On the File Server, created a new folder on a separate or existing drive (for example: D:\ShareFolder).
- Right-click the folder → Properties → Security → added the three AD security groups:
* Group1 → Read only * Group2 → Read and Write * Group3 → Full Control
- Opened Server Manager → File and Storage Services → Shares → New Share.
- Selected SMB Share – Quick, chose the folder location, and finished the wizard.
- Removed the Everyone group from permissions.
- Ensured only the three AD groups have access as per defined permissions.
---
4. Configure Quota in FSRM
- Open File Server Resource Manager → Quotas → Create Quota.
- Selected the shared folder path (e.g., D:\ShareFolder).
- Set the quota limit to 1 GB.
- Chose a hard quota type (to prevent users from exceeding the limit).
- Applied and saved the configuration.
---
5. Testing and Verification
Permission Testing
| Group/User | Access Level | Test Result |
|---|---|---|
| Group1 | Read Only | Can view files, cannot edit or delete |
| Group2 | Read and Write | Can create and modify files, cannot delete |
| Group3 | Full Control | Can create, edit, and delete files |
Quota Testing
- Tried to copy a file larger than 1 GB → Operation blocked.
- Copied files below 1 GB → Operation successful.
---
Result
- Folder permissions were successfully applied based on Active Directory groups.
- Quota limit of 1 GB enforced correctly using FSRM.
- Access restrictions worked as expected for all three user groups.
---
Summary
The FSRM configuration ensures:
- Controlled file access based on group permissions.
- Effective storage management using quota policies.
- Centralized administration through domain-integrated security groups.