Important Information about the Data Classification Toolkit

Applies To: Windows Server 2008 R2 with SP1, Windows Server 2012, Windows Server 2012 R2

Important information about this toolkit

The Microsoft Data Classification Toolkit (the “software”) is intended to help organizations simplify their ability to search, identify, and apply rules to data they specify. The software provides sample search expressions and rules that can be used to assist with compliance activities conducted by your organization’s IT professionals, auditors, accountants, attorneys, and other compliance professionals. The software does not replace those professionals. The software includes some authority document citations, but these citations do not verify or guarantee fulfillment of your organization’s compliance obligations under applicable laws, regulations or industry standards. The software has not been certified as compliant with any standards, including the Payment Card Industry Data Security Standard (PCI-DSS) and the National Institute of Standards and Technology Special Publication (NIST 800-53). It is the responsibility of your organization to handle data in accordance with legal and compliance obligations based on guidance from your organization’s compliance professionals. Reports and any other information provided by or generated from the software do not constitute auditing, accounting, legal or other professional advice. You must consult compliance professionals to confirm compliance with specific governance, risk, and compliance (GRC) authority documents. The software is provided on an "as is" basis, and Microsoft has no responsibility with respect to its use.

Using the Data Classification Toolkit to implement your organization’s policies

The following steps provide an overview of how to use the Data Classification Toolkit. Additional information can be found in the User Guide and the Data Classification Toolkit Reference.xlsx workbook, both of which are included with the installation of the Data Classification Toolkit.

To get started using the Data Classification Toolkit

  1. Create or designate a staging server running Windows Server 2012 R2 File Classification Infrastructure to customize configuration packages.

    Note

    If your production environment consists only of Windows Server 2008 R2 file servers, then you can use a Windows Server 2008 R2 file server as your staging server.

  2. Review the contents of the Data Classification Toolkit - Reference.xlsx with the appropriate IT pros, auditors, accountants, attorneys or other compliance professionals in your organization to define or review your organization’s data classification and protection policies.

  3. Identify the predefined file classification configuration package example XML files that most closely match your file classification requirements.

  4. Import one or more predefined file classification configuration packages to the server identified in Step 1 using either the Classification Wizard or the Import-FileClassificationPackage cmdlet.

  5. Customize the file classification configuration on the staging server using File Server Resource Manager to match your organization’s policies.

  6. Review the results of the implemented policy. If the results meet your organization's requirements, proceed to Step 7. If not, return to Step 5 and adjust the configuration.

  7. Export the configuration to a package XML file using either the Classification Wizard or the Export-FileClassificationPackage cmdlet.

  8. Deploy the customized package XML file created in the previous step to the production file servers using either the Classification Wizard or the Import-FileClassificationPackage cmdlet.

  9. Manage the Central Access Policy on the Windows Server 2012 file servers.

  10. Compare the file servers' classification configuration against the established baseline customized package to determine configuration compliance.

Privacy statement

Microsoft is committed to protecting your privacy, while delivering software that brings you the performance, power, and convenience you desire in your personal computing. The Data Classification Toolkit does not collect any information for use by Microsoft. No information is transmitted by the Data Classification Toolkit to Microsoft.

See also