Unable to implment ACL on Azure File Share because of non-routable domain (.local)

Question

I have a domain controller that has non routable domain like example.local, I have added an alternative UPN Suffix that is example.com. Synchronized the AD using Azure AD Connect and have domain joined the Azure File Share.

After implementation I am unnable to access the Azure File Share using example.com ID and getting the following error.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Error-specific details:
Error: DfsMapCacheAdd(Domain), 0x8007054b, The specified domain either does not exist or could not be contacted.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Answer 1

I guess, you can set the azure file ACL by the following cmdlets and no need to go for setting up an alternative UPN Suffix. After applying the ACL changes try to mount the file and see if it helps

$Guid = (Get-ADDomain -Identity "adname").ObjectGuid.Guid  
$Sid = (Get-ADDomain -Identity "adname").DomainSID.Value  
$StgaccountSid = (Get-ADComputer -Identity "ADComputerName").SID.Value  
$Params = @{  
    ResourceGroupName = "RGName"  
    Name = "azurefilename"  
    EnableActiveDirectoryDomainServicesForFile = $true  
    ActiveDirectoryDomainName = "adname.local"  
    ActiveDirectoryNetBiosDomainName = "adname"  
    ActiveDirectoryForestName = "adname"  
    ActiveDirectoryDomainGuid = $Guid  
    ActiveDirectoryDomainsid = $Sid  
    ActiveDirectoryAzureStorageSid = $StgaccountSid  
}  
Set-AzStorageAccount $Params  

----------

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

I am getting this error.

Get-ADComputer : Cannot find an object with identity: "azurefilename" under: 'DC=adname,DC=local'.

Answer 3

@Manu Philip thank you for your response, but these commands did not resolve the issue.

The issue was because I domain joined the Azure File Share with .local domain and was trying to access the Azure File Share with the .com ID.

Following are the action items that resolved the issue.

1. On-prem AD had forest with name adname.local
2. Added alternative UPN Suffix with adname.com
3. Configured AD Connect to sync on-prem users to Azure AD.
4. Logged in to windows 10 machine using ID name.com
5. Domain joined Azure File Share using this link https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable
6. Migrated data from on-prem File Server to Azure File Share using RoboCopy because Azure File Sync was not supported to the OS of on-prem File Server.
7. ACLs were transferred to Azure File Share.
8. ACLs were working when logging in to Azure File Share using on-prem AD credentials.

Thank you.