getting encryption error setting up SMB access for Storge account

Christopher J Nuss 41 Reputation points
2025-02-17T14:48:58.5633333+00:00

I'm logged in as a Global admin with access to our Pay as you go subscription but when I get to this point I get the following error message. I've tried this with ISE and Powershell 7 with the same result. Any assistance would be greatly appreciated.

Join-AzStorageAccountForAuth `

    -ResourceGroupName $ResourceGroupName `

    -StorageAccountName $StorageAccountName `

    -DomainAccountType $DomainAccountType `

    -EncryptionType $EncryptionType `

    -OrganizationalUnitDistinguishedName $OuDistinguishedName

Join-AzStorageAccount:

Line |

5 | -EncryptionType $EncryptionType `

 |          ~~~~~~~~~~~~~~~

 | A parameter cannot be found that matches parameter name 'EncryptionType'.
Azure Storage
Azure Storage
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,529 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Hari Babu Vattepally 3,270 Reputation points Microsoft External Staff Moderator
    2025-02-17T16:01:21.0033333+00:00

    Hi @Christopher J Nuss ,

    I understand that you are encountering error related to setting up SMB access for a Storage Account.

    As per the provided error message, it seems that the Encryption Type parameter is not a valid parameter for the Join-AzStorageAccountForAuth cmdlet. Which also indicates that Join-AzStorageAccount cmdlet does not recognize the -EncryptionType parameter. This could be due to couple reasons. In order to resolve this issue. Please follow the below suggestions:

    • Please check and make sure you are using the correct version of the AzFilesHybrid PowerShell module that supports the parameters you need. The -EncryptionType parameter might not be available in the version you currently have installed.
    • Please check the documentation for the Join-AzStorageAccount cmdlet to verify if the -EncryptionType parameter is a valid option. If it has been deprecated or removed in your version, you will need to modify your command accordingly.
    • If you are setting up encryption for your storage account, please follow the recommended method outlined in the Azure documentation. This may involve using different cmdlets or parameters.
    • Since you mentioned that you are using both ISE and PowerShell 7, please ensure you are running the commands in an environment compatible with the cmdlet and its parameters. It is recommended to use Windows PowerShell 5.1 for certain cmdlets. The cmdlet must be run from a client machine that is domain-joined to the Microsoft Entra Domain Services domain. User's image
    • Also, if the EncryptionType is not necessary, try removing it and run the cmdlet again to check if rest of the command works as expected.
    • Please check the below documentation or try using Get-Command Join-AzStorageAccount -Syntax to see the available parameters accordingly.

    Please refer the documentation here:

    https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable#run-join-azstorageaccount

    I hope this helps! Please do let us know if you any further quires in the comments sections. We will be glad to assist you closely.

    Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    User's image


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.