You have five file servers that run Windows Server. You need to block users from uploading video files that have the .mov extension to shared folders on the file servers. All other types of files must be allowed. The solution must minimize administrative effort. What should you create?

To block users from uploading specific file types, such as video files with the .mov extension, to shared folders on Windows Server, you should create a file screen. File screens are a core feature of the File Server Resource Manager (FSRM) role service. By configuring an active file screen, you can explicitly prevent users from saving unauthorized file types to designated volumes or directory trees. You can define a file group that includes the .mov extension and apply it to the shared folders. This approach minimizes administrative effort because it natively targets file extensions at the file system level without requiring complex identity-based rules or external compliance engines.

A. Dynamic Access Control (DAC) is used for permission management based on user claims and file classifications, not for blocking specific file extensions.
C. Central access rules are components of DAC used for authorization, which cannot natively block file uploads based solely on extensions.
D. Data loss prevention (DLP) is typically used in Microsoft 365 to prevent the sharing of sensitive information, not for basic file extension blocking on local file servers.

1. Microsoft Learn. "File Screening Management." Windows Server Storage Documentation. Section: Create a File Screen.

2. Microsoft Learn. "File Server Resource Manager (FSRM) overview." Section: Features.