Cannot connect to Azure Files share

Question

I have set up an Azure Files share with Azure AD Kerberos as the source.

When running the connection script (Active Directory authentication) I get the error below. Please help!

The PC is Azure AD-joined, with the user logging in with an Azure AD account.

The Azure website states: "Azure AD Kerberos authentication allows users to connect to Azure Files over the internet without requiring a line-of-sight to domain controllers."

New-PSDrive : The system cannot contact a domain controller to service the authentication request. Please try again later
At C:\Users\testuser\Desktop\connect-files-share.ps1:4 char:5

• New-PSDrive -Name Z -PSProvider FileSystem -Root "\storage ...
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : InvalidOperation: (Z:PSDriveInfo) [New-PSDrive], Win32Exception
• FullyQualifiedErrorId : CouldNotMapNetworkDrive,Microsoft.PowerShell.Commands.NewPSDriveCommand

Answer 1

Have you made the registry changes to the Azure AD Joined client and rebooted?

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-azure-active-directory-enable?tabs=azure-portal#configure-the-clients-to-retrieve-kerberos-tickets

Answer 2

@Ash ,
It looks like you are getting the error "The system cannot contact a domain controller to service the authentication request. Please try again later" when using the New-PSDrive cmdlet to connect to an Azure Files share using Azure AD Kerberos authentication.

There are a few things you can try to troubleshoot this issue:

• Make sure that the client machine can communicate with the domain controller. You can test this by pinging the domain controller or trying to access other resources on the domain.
• Check the status of the Azure AD Domain Services instance in the Azure portal to ensure it is running and healthy.
• Ensure that the Azure AD Domain Services instance is configured correctly for the Azure AD tenant. You can check this by going to the Azure AD Domain Services page in the Azure portal and looking for any error messages or warning icons.
• Check the event logs on the client machine for any relevant error messages.
• Make sure that the client machine is configured correctly for Kerberos authentication. This includes setting the correct DNS server, time synchronization, and Kerberos configuration settings.

I hope this helps! Let me know if you have any further questions or need more information.

----------

Please "Accept as Answer" and Upvote if any of the above helped so that it can help others in the community looking for remediation for similar issues.