Azure file share often automatically get disconnected ..

Question

Hi,

i have mounted an Azure File share on one of my windows device using below document ..

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-quick-create-use-windows

but this file share often got disconnected .. so whenever it gets disconnected i have to again give my access keys as password then it gets connected ..

my ask is this - why it is often getting disconnected even after configuring file share properly..

it is possible to set access rules on file share which mounted on windows machine .. i.e only particular group should have read/write access on mounted file share ..

example : i have group called DEV in my server so only this group should access file share which is mounted on server.

Regards,
Maddy

Answer 1

@Rohit Boddu When the Azure file share gets disconnected and when you try to access do you get any error message or error code? Do its prompts for the password? Please refer to this blog on Azure File Share Connection Problems and let me know the status

This article lists common problems that are related to Microsoft Azure Files when you connect from Windows clients. It also provides possible causes and resolutions for these problems https://learn.microsoft.com/en-us/azure/storage/files/storage-troubleshoot-windows-file-connection-problems

We have different access policies for Azure file share, let me explain, how it works, later you can setup based on your requirement:

You can assign permission at the share level and directory/file-level

Azure Files offers two additional ways to manage access control:

You can use shared access signatures (SAS) to generate tokens that have specific permissions, and which are valid for a specified time interval. For example, you can generate a token with read-only access to a specific file that has a 10-minute expiry. Anyone who possesses the token while the token is valid has read-only access to that file for those 10 minutes. Shared access signature keys are supported only via the REST API or in client libraries. You must mount the Azure file share over SMB by using the storage account keys.

Azure File Sync preserves and replicates all discretionary ACLs, or DACLs, (whether Active Directory-based or local) to all server endpoints that it syncs to.

You can refer to Authorizing access to Azure Storage for a comprehensive representation of all protocols supported on Azure Storage services.

• If you mount the file share by using SMB, you don't have folder-level control over permissions. However, if you create a shared access signature by using the REST API or client libraries, you can specify read-only or write-only permissions on folders within the share.

What level of access is required for Files service Admin in Azure for managing Azure file sync services?
Storage File Data SMB Share Contributor - Allows for read, write, and delete access on files/directories in Azure file shares.
Storage File Data SMB Share Elevated Contributor - Allows for read, write, delete, and modify ACLs on files/directories in Azure file shares

Refer here: How RBAC works

Disclaimer: This response contains a reference to a third-party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.