How to Block Specific File Types in Windows Server 2012
In an environment where you are working as an administrator and your client has asked you to block specific files types that can be stored in Windows server then this can be done easily by following the below-mentioned procedure.
The main benefit of this type of restriction is that it can save your file server just in case if some user uploads a file that can create a security risk and it also saves your storage space as well.
First, we will understand what is file screening? After windows server 2003 Microsoft introduced the file server resource manager (FSRM) which gives the option to the administrators to describe all the file types which they want users to save them on file servers.
Log in to the Windows server to block the specific file types. I will use windows server 2012 R2 as an example. FSRM can be configured using the add roles and features option but in this article, we will configure it using PowerShell console.
Click on windows icon on the taskbar and right–click on Windows PowerShell and open it as an administrator.
Once PowerShell is opened as an administrator then enter the below-mentioned command.
“Add-WindowsFeature –Name FS-Resource-Manager –IncludeManagementTools”
Hit enter and it will start collecting the data.
Once data is collected it will start the installation.
After the installation PowerShell console will show the result.
Now go to the server manager and click on tools to select FSRM.
It will open FSRM windows console.
In the left pane expand “File Screening Management” and then click on “File Groups” and you will see there are several predefined file types that can be created without selecting any specific file extension.
Similarly, if you click on “File Screening Template” there are also few predefined templates defined.
Let’s say if you want to allow users to save audio and video files right-click on “Block audio and video files” and select “Edit Template” properties
It will open up a new wizard under screening type select the “Passive screening”.
Press Ok and it will bring back the file screening template. This is how you can block any file type in windows server.
