Azure Files - SMB Mount

Question

I have Azure Files storage with a public endpoint and AD DS enabled. I do not have an on-premise AD and only use Azure AD.

I am unable to mount the file using windows credentials and dont understand why not if i have AD DS enabled. All documents I see refer me to having a On-Premise domain joined VM

Why do I even need a VM when I have Azure Files with AD DS ?

Answer 1

Hi Lawrence ,

If you are trying to mount the Azure Files on a Azure AD domain joined or Azure AD registered Device , Neither on-premises AD DS authentication nor Azure AD DS authentication is supported. This is the current limitations.

Please follow the below link for more details

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview

Hope this clarifies your question

Answer 2

Hi Lawrence Moti, I hope I can help you with this question.

You dont need a Azure ADDS domain joined device as you can read here:

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable?tabs=azure-portal#mount-the-file-share-from-a-non-domain-joined-vm

But ....the users must have an identity and credentials (an Azure AD identity synced from Azure AD to Azure AD DS) in the Azure AD DS managed domain AND

the client need a line-of-sight connection to the Azure ADDS which is only possible with a active site-to-site or point-to-site vpn into Azure.

---

If the reply was helpful, please don’t forget to upvote or accept it as an answer, thank you!