Cannot connect to Azure File Share using Active Directory source "Azure AD Kerberos"

Dino 6 Reputation points
2022-12-14T13:01:39.213+00:00

When trying to access my storage account file share, it will pop up with an authentication prompt saying "The user name or password is incorrect". Trying to type in the username and password manually in that box will give me the same error.

I've tried connecting to it in the following ways:

  • net use \
Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,156 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,670 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. TP 74,786 Reputation points
    2022-12-14T13:48:25.967+00:00

    Hi,

    On your laptop, did you edit local group policy via gpedit.msc to enable it to retrieve Kerberos TGT during logon? And restart after so it takes effect?

    Computer Configuration\ Administrative Templates\ System\ Kerberos\

    Allow retrieving the cloud kerberos ticket during the logon Enabled

    -TP

  2. Sumarigo-MSFT 43,406 Reputation points Microsoft Employee
    2022-12-15T15:53:43.667+00:00

    @Dino Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

    Based on the error message: Can you refer to this troubleshooting steps mentioned in this article and let me know the status.

    Also, please cross verify the Prerequisites again

    If the issue still persist I would like to work closer on this issue

    Please let us know if you have any further queries. I’m happy to assist you further.

    ---------
    Please do not forget to 271066-accept-answer.png and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments
  3. Dino 6 Reputation points
    2022-12-20T08:19:53.027+00:00

    Hi SumanthMarigowda-MSFT

    All Prerequisites have been checked.

    My client (laptop) is an Azure joined device.
    My user is a hybrid identity, being synced through Azure AD Connect.
    My Laptop is a Windows 10 Enterprise 21H2

    The only one I'm not sure on how to check is:
    Azure AD Kerberos authentication only supports using AES-256 encryption

    I've tried enabling a Local Security policy by following this:
    https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos

    Basically going to:
    Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

    Enabling this one:
    Network security: Configure encryption types allowed for Kerberos

    By setting these:
    RC4
    AES256
    Future encryption types

    This made no difference, so I've reverted the change.

    Regarding the troubleshooting steps, I've already gone through that and have not found any that match my issue. If you think there is a specific article that could assist, let me know and I'll try it out.