providers of innovative software solutions
and services for the enterprise.

Let DTS Help
 

File Security Manager

Robust, configurable, file and directory permissions management.

File Security Manager (FSM) is designed to provide a robust solution to a nagging and age old problem that has existed since Microsoft first released the original version of Windows NT. Since that first version File Ownership has carried, and continues to carry, great significance, but poses a dilemma for network managers who are short on time and long on priorities. The essence of the issue is that the owner of a file or directory has enormous power over that object even if the administrator strips their explicit rights using the customary tools provided by the operating system and virtually all storage resource management solutions today use ownership as the determining factor in how they do their job of making better use of your organizations networked storage. Due to these facts, ownership of files and directories impacts the security of your enterprise storage and efficient management of that storage, two areas that are very difficult to compromise over the long term.

The Security aspect of the problem stems from the fact that the creator of a file or directory is the owner of that resource until explicitly changed. Also until recently, the operating systems specifically prevented anyone from giving someone ownership of a file system object due to the fact that this mechanism could technically be used to cover evidence of snooping or outright spying. In recent versions of Windows Server, Administrators can now change the owner of a file or directory to any user they choose, but this operation is buried in the administrative interfaces and is very manual (i.e. the Admin must select the object and set the owner with no room for applying any logic to the application). FSM provides that same Administrator with a tool that is rule based that allows for much greater control on how ownership is set, even allowing ownership of objects that meet specific criteria including age, size, type, name pattern, current owner or even a combination of all these criteria to decide who gets ownership of what objects.

This means that when "Bob" is moved over from Human Resources to some other department, the sensitive files he created on the job can have their owner reassigned quickly and easily to his replacement. Or if you are looking to lock down sensitive documents with a particular naming pattern (i.e. prefix, suffix or any other expressible pattern), you can change the owner and identify all files that meet the criteria in one operation.

The Storage Management aspect of the problem comes from the fact that most Storage Management solutions today such as Quota Management, File Auditing, Storage Chargeback and other vital functions use the file and directory owner as the key indicator in deciding the proper action based on their configuration. If you have a quota set on a user's default directory, but the Administrator ended up owning 90% of all user files when the migration was done (a much more common situation than most people realize), the efficacy of the quota is reduced. FSM solves this problem with Enterprise features such as Rules that find a user's default directory and explicitly set ownership of all their files and directories to that user thereby eliminating the sins of past migrations.

File Security Manager makes it easy to get a handle on the management of file ownership when you first use it and over time.

Download the FSM Product Installation Guide version 2.2

Download the FSM Product User Guide version 2.2

File Security Manager