Group Policy needs Authenticated Users on File Share for msi deployment; is this possible in Azure File Share?

Bryan Fowler 1

Trying to deploy new software package using Group Policy pointed to an Azure File Share. Receive "Add operation failed. Unable to extract deployment information from the package. Run validation on the package to ensure that the package is correct. In a typical windows file share this message would indicate Authenticated Users does not have permission to the file share. How can this be achieved with an Azure File Share?

Sumarigo-MSFT 43,641 Reputation points Microsoft Employee

2022-06-23T06:47:37.637+00:00

@Bryan Fowler Firstly, Apologies for the delay response! Can you please elaborate bit more on your query? Can you please share the screenshot of the error?

SMB 3.0 supports running executables from the share. Usually this is caused by a permissions issues. Can you check the following?

• Corrupted or damaged file when it was downloaded.
• No Administrator rights in the computer account and can you please provide azure storage contributor access to the Azure File Share and also?)
• Anti-Virus blocking the installation.
• Windows Installer problem.
Bryan Fowler 1 Reputation point

2022-06-24T18:48:29.93+00:00

Thanks for replying.
The msi file runs fine when not in the Azure Share
Even when run by domain admin it won't execute on a pc from Azure share

Everything seems to point to the share
Even changed default permissions to StorageFileDataSmbShareContributor for the file share but still the same issue.