I would like to restrict my AD users so they can only modify/create let say 10 files per minute via samba share. I think it can help to reduce destructive effects of ransomware activity. Is it possible to implement this on Windows Server 2012R2? FSRM + powershell maybe?
Why don't you create a file screen that blocks encrypted files for the most common Ransom-ware? Then run a Powershell script that notifies you on attempts to write those file types. You can then add some features to disable the AD account until you investigate further.
List to block https://fsrm.experiant.ca/
GITHUB crytoblocker https://github.com/nexxai/CryptoBlocker