Is it possible to map the disk of a Azure file share located in an Azure storageaccount using Intune?

Question

Is it possible to map the disk of a Azure file share located in an Azure storageaccount using Intune?

Allan Stark 541

Hello. We have Intune enrolled laptops for users who need to automatically mount Azure file share as a disk via a PS script.
We don't have any on-prem infrastructure or hybrid or AD DS implemented in Entra ID. This script, of course, works without problems if the user runs it himself, but how can this process be automated by Intune? We tried to run this PS script using the logged on credentials and system (the setting in Devices | Scripts in Intune) with no positive result. The PS script is standard (copied from the storeaccount connection): $connectTestResult = Test-NetConnection -ComputerName xxx.file.core.windows.net -Port 445
if ($connectTestResult.TcpTestSucceeded) {
# Save the password so the drive will persist on reboot
cmd.exe /C "cmdkey /add:"xxx.file.core.windows.net" /user:"localhost\xxx" /pass:"xxx""
# Mount the drive
New-PSDrive -Name Z -PSProvider FileSystem -Root "\xxx.file.core.windows.net\xxx" -Persist
} else {
Write-Error -Message "Unable to reach the Azure storage account via port 445. Check to make sure your organization or ISP is not blocking port 445, or use Azure P2S VPN, Azure S2S VPN, or Express Route to tunnel SMB traffic over a different port."
}

1 answer

Your answer

Answer 1

Crystal-MSFT 53,991 Microsoft External Staff

@Allan Stark, Thanks for posting in Q&A. From your description, I know the user can run the script manually successfully. For the user in the script, could you let us know if this is a local user or an Azure AD user?

For the map, it will map on current logging user. So I think we need to choose log on credential and assign it to the user group when deploy it via Intune.

As it seems not working, please check the following information:

Please check what is the status of the device in the PowerShell script deployment. And see what is the user shows in the portal?
Please look into Agentexecution log to see if there's any error.
Follow the steps in the following link to do troubleshooting to see if there's more finding.

https://oliverkieselbach.com/2017/11/29/deep-dive-microsoft-intune-management-extension-powershell-scripts/

Note: Non-Microsoft link, just for the reference.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2024-02-13T06:05:37.2666667+00:00

@Allan Stark, How's everything going? I am writing to see if there's any opportunity to provide the required information to go further. If yes, feel free to let us know.
Allan Stark 541 Reputation points

2024-02-19T13:52:02.97+00:00

Hello Crystal-MSFT

I have already done debugging before before creating this post.
The Intune Device/User status report shows successful application.
In the logs in *C:\ProgramData\Microsoft\IntuneManagementExtension\Logs* and in the built-in Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider Windows Inevt log there is nothing related to the script used or its identifier.

Unfortunately, this functionality of Intune does not seem useful at the moment. There is still no way to assign script execution to various triggers (on boot, login, etc.), which would greatly help with the automation of various administrative operations.

The same goes for debugging them.
It is suggested to look in the folder *C:\Program Files (x86)\Microsoft Intune Management Extension\Policies\Scripts* for scripts and in C:\Program Files (x86)\Microsoft Intune Management Extension\Policies\Results\UserGUID_ScriptGUID.output|.error|.timeout for its outputs/results. In my case they are empty, as noted in the documentation if they are successful.
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2024-02-20T02:02:33.97+00:00

@Allan Stark, Thanks for the reply. After successful execution the script and results are cleaned up and nothing is left on the device. In your description, I know the script deployed successfully in Intune portal. So I think this can be the reason why you see it empty. For our issue, it needs do more log analysis, please open case to troubleshoot the issue.

https://learn.microsoft.com/en-us/mem/get-support

Share via

Is it possible to map the disk of a Azure file share located in an Azure storageaccount using Intune?

1 answer

Your answer