File Server

Question

File Server

Handian Sudianto 7,116

Hello,

We have on-prem AD and Azure AD and in next year we will migrate all from on-prem AD to Azure AD. We also have file server to accommodate user work files on the on-prem, and now i need some information when we migrate full to the Azure AD what Microsoft services can be replaced for our on-prem file server? We already try using SharePoint/one drive but we cannot make security if the folder located in many sub folder. Any suggestion or recommendation?

0 comments

2 answers

Your answer

Answer 1

Marilee Turscak-MSFT 37,391 Microsoft Employee Moderator

Hi @Handian Sudianto ,

Azure Files would be the best service for your scenario. You can use Azure Files to replace or supplement on-premises file servers and store file shares in the cloud.

If you want to migrate your on-premises file servers to the cloud, you can use these options:

Az Copy: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10
Storage Explorer: https://learn.microsoft.com/en-us/azure/vs-azure-tools-storage-explorer-files
Azure File Sync: https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-deployment-guide?tabs=azure-portal%2Cproactive-portal

I recommend reviewing the migration guides:

Migrate to Azure file shares | Microsoft Learn
Replace or extend Windows file servers with Azure Files

Let me know if this is what you are looking for and if you have further questions.

If the information helped you, please accept the answer. This will help us as well as others in the community who may be researching similar information. Otherwise let me know if you have further questions.

Handian Sudianto 7,116 Reputation points

2023-09-12T01:06:49.7933333+00:00

Hello @Marilee Turscak-MSFT

Thanks for your recommendation, how about the permissions? Currently in the on-prem we set the NTFS security to allow / block access, how we can do same thing on azure files?
Sumarigo-MSFT 47,511 Reputation points Microsoft Employee Moderator

2023-09-12T07:10:28.8666667+00:00

@Handian Sudianto , You can configure Windows access control lists (ACLs), also known as NTFS permissions, at the root, directory, or file level. While share-level permissions act as a high-level gatekeeper that determines whether a user can access the share, Windows ACLs operate at a more granular level to control what operations the user can do at the directory or file level.

Azure RBAC allows you to control access to Azure resources, including Azure Files**.** You can assign roles to users, groups, and applications to control their access to Azure Files. For example, you can assign the "Storage File Data SMB Share Contributor" role to a user to allow them to create and manage SMB shares on Azure Files.

This article provides detailed information on configuring the ACLs " https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-configure-permissions"

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

File Server

2 answers

Your answer