Enable AD authentication for Azure Files

Question

I am trying to enable AD authentication for Azure Files. Using the Microsoft provided documentation I get to the following PowerShell command.

join-AzStorageAccountForAuth -ResourceGroupName "<resource-group-name>" -Name "<storage-account-name>" -Domain "localdomain.net" -DomainAccountType ServiceLogonAccount -OrganizationalUnitDistinguishedName "ou-name-attribute-value"

I modify -OrganizationalUnitDistinguishedName "ou-name-attribute-value" to -OrganizationalUnitDistinguishedName "Aure Files", this orginizational unit exists in my domain.

However I get the following error:
Cannot find an object with identity: 'Azure Files' under 'DC=ad,DC=timhoo,DC=com'.

I am currently stuck because somehow the command is not finding my orginazational unit.

See Screenshots below:

Answer 1

@Tim H
It looks like you are specifying the OU Name rather than the OU DistinguishedName. You can try substituting -OrganizationalUnitDistinguishedName with -OrganizationalUnitName. Otherwise use Get-ADOrganizationalUnit to find the DistinguishedName and set it appropriately. It should look something like the name below.

-OrganizationalUnitDistinguishedName "OU=Azure Files,DC=CONTOSO,DC=COM"  

Hope this helps! Let us know if you are still facing issues or have further questions.

-------------------------------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.