Search


Sponsors

R2 File screening functionality shortcoming

Windows Server 2003 R2 features the File Server Resource Manager which has the following functionalities: Quota Management, File Screening and Storage Reporting.
The File Screening technology enables administrators to restrict the use and propagation of non-business files throughout the organization. File screening rules defined by so called filters apply to all users in a folder tree or volume. Exceptions limiting inheritance of screening policies can be configured.

On the blog of Matt Hester there is an interesting part which covers the limitations of this file screening technology. The limitation of the file screening technology is that it screens on file extensions.

Let's say that you configure a file screening template which doesn't allow Audio and Video files and apply this template to a folder. When you copy a file with a mp3 extension you get a access denied for this file. If you rename this file to a doc extension it's possible to copy the file to the folder.

It isn't possible though to rename the file with the doc extension back to it's original mp3 extension as long as it is in the folder with the template defined. What you can do though is take another (not known) extension and configure your mp3 player to play this extension as well.

Conclusion: The file screening technology can help you block unwanted files, in my opinion though it will be a matter of time before users find out it's weakness and make advantage of it. In that case it won't help you solve the real problem.



  
Remember personal info?

Emoticons / Textile

Before sending a comment, you have to correctly answer a simple question you know the answer to. This is a countermeasure against automated spam bots.
 

  ( Register your username / Log in )

Notify:
Hide email:

Small print: All html tags except <b> and <i> will be removed from your comment. You can make links by just typing the url or mail-address.