File Server

Question

File Server

Handian Sudianto 2,811

Hello,

We have on-prem AD and Azure AD and in next year we will migrate all from on-prem AD to Azure AD. We also have file server to accommodate user work files on the on-prem, and now i need some information when we migrate full to the Azure AD what Microsoft services can be replaced for our on-prem file server? We already try using SharePoint/one drive but we cannot make security if the folder located in many sub folder. Any suggestion or recommendation?

Answer 1

Marilee Turscak-MSFT 27,481 Microsoft Employee

Hi @Handian Sudianto ,

Azure Files would be the best service for your scenario. You can use Azure Files to replace or supplement on-premises file servers and store file shares in the cloud.

If you want to migrate your on-premises file servers to the cloud, you can use these options:

Az Copy: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10
Storage Explorer: https://learn.microsoft.com/en-us/azure/vs-azure-tools-storage-explorer-files
Azure File Sync: https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide?tabs=azure-portal%2Cproactive-portal

I recommend reviewing the migration guides:

Migrate to Azure file shares | Microsoft Learn
Replace or extend Windows file servers with Azure Files

Let me know if this is what you are looking for and if you have further questions.

If the information helped you, please accept the answer. This will help us as well as others in the community who may be researching similar information. Otherwise let me know if you have further questions.

Handian Sudianto 2,811 Reputation points

2023-09-12T01:06:49.7933333+00:00

Hello @Marilee Turscak-MSFT

Thanks for your recommendation, how about the permissions? Currently in the on-prem we set the NTFS security to allow / block access, how we can do same thing on azure files?
Sumarigo-MSFT 38,801 Reputation points Microsoft Employee

2023-09-12T07:10:28.8666667+00:00

@Handian Sudianto , You can configure Windows access control lists (ACLs), also known as NTFS permissions, at the root, directory, or file level. While share-level permissions act as a high-level gatekeeper that determines whether a user can access the share, Windows ACLs operate at a more granular level to control what operations the user can do at the directory or file level.

Azure RBAC allows you to control access to Azure resources, including Azure Files**.** You can assign roles to users, groups, and applications to control their access to Azure Files. For example, you can assign the "Storage File Data SMB Share Contributor" role to a user to allow them to create and manage SMB shares on Azure Files.

This article provides detailed information on configuring the ACLs " https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-configure-permissions"

File Server

1 answer

Activity