Make sure Azure Active Directory Domain Services (Azure AD) is enabled for your Active Tenant - Azure Files/Share

Question

Help !!

This is my first time...

I am trying to setup an Azure Files test share in Azure. The Azure active directory with users, subscription, the storage account and file share created. I need to assign general users permissions on the share. When I click on Access Control (IAM) on the share it says...

To give individual accounts access to the file Share (Kerberos), enable identity-based authentication for the storage account.

How do I do this ? Or the way to make the share so that I can select users in the Azure active directory to give them permission (read, write etc..)

Note I do not have an onsite domain controller and do not wish to have one.

Thanks

Answer 1

@Glen Bowtell Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.
Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Azure Files supports identity-based authentication over Server Message Block (SMB) using the Kerberos authentication protocol through the following three methods:

On-premises Active Directory Domain Services (AD DS)
Azure Active Directory Domain Services (Azure AD DS)
Azure Active Directory Kerberos (Azure AD) for hybrid user identities only (preview)

This article focuses on how Azure file shares can use domain services, either on-premises or in Azure, to support identity-based access to Azure file shares over SMB.

This articles states, How Azure Files share works, Supported scenarios, restrictions, Prerequisites and how to configure Azure File Share(Including videos explanation)

If you have any additional questions or need further clarification, please let me know.

----------

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

For better understating the issue: can you please share the screenshot of the error message?

However can you cross-verify that you have completed the following prerequisites: (Before you enable Azure AD over SMB for Azure file shares)

After completing the prerequisites, if you still find any issue, please let us know, I would like to work closer on this issue.

Additional information: This article lists common problems that are related to Microsoft Azure Files when you connect from Windows clients. It also provides possible causes and resolutions for these problems.

This article lists common problems that are related to Microsoft Azure Files when you connect from Windows clients. It also provides possible causes and resolutions for these problems. Troubleshoot Azure Files problems in Windows (SMB)

Looking forward for your reply!