This Solution Accelerator is designed to help enable an organization to identify, classify, and protect data on their file servers. The out-of-the-box classification and rule examples help organizations build and deploy their policies to protect critical information on the file servers in their environment.
Data Classification Toolkit for Windows Server 2012 - Release Notes.rtf
The Data Classification Toolkit supports new Windows Server 2012 features, Dynamic Access Control, and backward compatibility with the functionality in the previous version of the toolkit. The toolkit provides support for configuring data compliance on file servers running Windows Server 2012 and Windows Server 2008 R2 SP1 to help automate the file classification process, and make file management more efficient in your organization. The release of Windows Server 2012 is here. Make sure your compliance process and policies are up to date!
Note: Use of the Microsoft Data Classification Toolkit for Windows Server 2012 does not constitute advice from an auditor, accountant, attorney or other compliance professional, and does not guarantee fulfillment of your organization’s legal or compliance obligations. Conformance with these obligations requires input and interpretation by your organization’s compliance professionals.
Simplify your central access policy configuration experience. The latest version of the toolkit allows you to provision and standardize central access policy across a forest and apply default access policies on your file servers. The toolkit also provides tools to provision user and device claim values based on Active Directory Domain Services (AD DS) resources to help simplify configuring Dynamic Access Control in Windows Server 2012. You can also easily track and report existing Central Access Policy on file shares.
Streamline your data compliance user experience. The toolkit adds a UI to the existing Windows PowerShell experience, including a Classification Wizard that you can use to manage file classifications, and a Claims Wizard to manage central access policy on the file servers in your organization. You can also use the Claims Wizard to build claim values in AD DS.
The Data Classification Toolkit for Windows Server 2012 is designed to help organizations:
Use the Data Classification Toolkit to help your organization successfully plan and maintain data classification programs in these critical areas:
- Identify, classify, and protect data on their file servers.
- Take advantage of new features and technologies in Windows Server 2012, as well as support hybrid environments with file servers running Windows Server 2012 and Windows Server 2008 R2 SP1.
- Easily configure default central access policy across multiple servers.
- Build and deploy policies cost-effectively to protect critical information.
- Identifying applicable IT GRC authority documents.
- Defining corresponding classification policies.
- Preserving evidence that demonstrates the implementation of effective controls.
To view this solution online at TechNet, click here.
Send questions or feedback to us directly at email@example.com.
Supported Operating System
Windows 7, Windows 8, Windows Server 2008 R2 SP1, Windows Server 2012
The following steps provide an overview of how to usethe Data Classification Toolkit. Additional information can be found in the User Guide and the Reference Guide workbook, both of which are included with the toolkit:
- Create or designate a server running Windows Server 2012 File Classification Infrastructure to be used in customizing configuration packages.
- Review the contents of the ‘Data Classification Toolkit Reference Guide.xlsx’ with the appropriate IT professionals, auditors, accountants, attorneys or other compliance professionals in your organization to define or review your organization’s data classification and protection policies.
- Identify the predefined file classification configuration package example .xml files that most closely match your file classification requirements.
- Import one or more predefined file classification configuration packages into the server identified in Step 1 using the Classification Wizard or the Import-FileClassificationPackage cmdlet.
- Customize the file classification configuration on the server using File Server Resource Manager to match your organization’s policies.
- Review the results of the policy as implemented. If it meets your requirements, proceed to Step 7. If not, return to Step 5 and adjust the configuration.
- Export the configuration to a package .xml file using the Classification Wizard or the Export FileClassificationPackage cmdlet.
- Import the customized package .xml file created in the previous step to the production file servers using the Classification Wizard or the Import-FileClassificationPackage cmdlet.
- Compare the file server classification configuration against the established baseline customized package to determine configuration compliance.
For more information, see the sections "Using the Data Classification Toolkit Classification Wizard" and the cmdlets "Import-FileClassificationPackage" and "Export-FileClassificationPackage" in Appendix A, "Data Classification Toolkit Cmdlet Reference", in the User Guide.
For additional information, see Data Classification Toolkit for Windows Server 2008 R2