question

MonellaDomenico-3066 avatar image
0 Votes"
MonellaDomenico-3066 asked DaisyZhou-MSFT commented

GPO Enable File Screens without FSRM not working

Hello,
we have a problem with file screening in our company.

We have redirected the user Desktop and Documents folder to a network share and have enabled Offline Files for it.
Now, i have enabled the GPO "Enable File Screens" in Administrative Templates -> Network -> Offline Files and i added .wav;.mp4;*.mp3

85675-gpo.png

In the description of teh GPO it says, that it prevent the user for saving these file types in offline Available folder. But it doesn't work :(
I can still write mp3 files on my desktop, and these are then saved on our file server :(

We want that the user can not save these file types in de synced desktop and documents folder, because unnecessary storage consumption.

Is there any way to do this without using FSRM? Or have i configred the GPO incorrectly?

Thanks for help!


windows-group-policy
gpo.png (30.5 KiB)
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @MonellaDomenico-3066,
If this question has any update or is this issue solved? Also, for the question, is there any other assistance we could provide?

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

Hello @MonellaDomenico-3066,
Would you please tell me how things are going on your side. If you have any questions or concerns about the information I provided, please don't hesitate to let us know.
Again thanks for your time and have a nice day!

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

Hello @MonellaDomenico-3066,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered MonellaDomenico-3066 commented

Hello @MonellaDomenico-3066,

Thank you for posting here.

The group policy is a computer configuration, you can try to configure it as below and check if it helps.

1.Create an OU and put one or more servers with offiline folders in this OU.
2.Create GPO and link it to OU above.
3.Edit GPO as screenshot above.
4.Restart the server with offline folder.
5.Logon this server with offline folder using one domain user account.
6.Check if the user can create the specific file types in offline Available folder.


Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
thanks for help, but this is not working.

I have the GPO linked to servers and computers.
Then on my computer i created the offline files share with the share from the server.
But i can still write mp3s in it :(

0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered DaisyZhou-MSFT edited

Hello @MonellaDomenico-3066,

Thank you for your update.

Here is my test in my lab and it works fine.

You can refer to the steps in your AD environment to see if it helps.

Domain: b.local

Domain member server: dc2019

Domain client win10-180911

1.on DC2019, I create a shared folder (it is a domain member server).
87546-jp3.png

2.And I enable offline files on client win10-180911.
87518-jp2.png

3.On win10-180911 client, access \\dc2019 and enable "Always available offline" as below.
87537-jp4.png

4.Create an OU and put client win10-180911 to this OU.

5.Create a GPO and link the GPO to the OU above.

6.Edit the GPO.
87654-jp5.png

7.Restart the client win10-180911 and sign in using a domain user account and create a file with .jpg, it will display the error message.
87595-jp222.png

8.But I can create files with other file extension except .jpg (in my case).


Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.



jp3.png (24.4 KiB)
jp2.png (118.0 KiB)
jp4.png (117.5 KiB)
jp5.png (25.5 KiB)
jp222.png (33.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.