Map Network Drive to Non Domain Joined Computer

Prabin Bhusal 6

Hello,

I have a storage account in Azure which is domain joined. I can map that folder in domain joined computer but when I try to join into non domain joined computer. It ask for the Username and Password. I provide the admin credentials but it cannot be connected.

Is it possible to map domain joined storage account into non domain joined computer ?

Patrick Roberto Caetano de Moraes 1 Reputation point

2021-06-30T23:18:30.89+00:00

I have exactly the same problem. When i´m mapping from a domain joined machine, it works. But if i try to map in a machine outside the domain, even with the correct credentials, an password error occurs.

Did you solved the problem?
Philippe Levesque 5,681 Reputation points MVP

2021-06-30T23:24:34.1+00:00

Hi, make sure you map with the server fqdn, with the ip newer server os tend to block the map from non domain joined computer.
Patrick Roberto Caetano de Moraes 1 Reputation point

2021-07-01T18:37:32.583+00:00

Hi @Philippe Levesque
I´m trying to map using:
net use n: \namestorage.file.core.windows.net\nameshare

In a domain joined machine, it works
in a machine outsite the domain (working from home), when i map and input login and password, i get: "System error 86. The specified network password is not correct"

Looks like only works in a domain joined machine inside the AD DS network.
Prabin Bhusal 6 Reputation points

2021-07-02T10:34:46.687+00:00

I havent fixed that Problem Yet. I am still looking for a solution
Prabin Bhusal 6 Reputation points

2021-07-02T10:35:42.753+00:00

Exactly that's the problem that I am facing. Please let me know if you find any solutions.
Patrick Roberto Caetano de Moraes 1 Reputation point

2021-07-02T10:54:47.59+00:00

At this post: https://blog.baeke.info/2020/06/10/integrate-an-azure-storage-account-with-active-directory/

I sent the same question. Geert Baeke said "YES", it works from machines that are not joined to domain.

In my tests, i've already tried to map it in 2 ways:

net use i: \storagename.file.core.windows.net\share /user:"user@keyman .onmicrosoft.com" "password"
net use i: \storagename.file.core.windows.net\share /user:"domain\user" "password"

notes:
1: user@keyman .onmicrosoft.com IS the UPN of the user in AD DS (I added domain.onmicrosoft.com as suffix) to match the login in Azure AD and AD DS UPN (i'm not using custom domain yet)
2: user@keyman .onmicrosoft.com IS synced in AD Connect
3: if i use the (net use i: \storagename.file.core.windows.net\share /user:"user@keyman .onmicrosoft.com" "password") in my Domain Controller for example, i can map the drive with the user permissions. But the same command in a machine that is NOT domain joined, i get the "System error 86, incorrect password). I tried to map with windows "map network drive", still incorrect password.

I'm going to open a support ticket at Microsoft.
Let's talk over here. If anyone is successful, please share.
Abe Logan 1 Reputation point

2021-08-20T05:17:38.243+00:00

I have found this solution

https://davidvielmetter.com/tricks/howto-map-drive-without-domain-membership/

That has worked for me
Abe Logan 1 Reputation point

2021-08-20T05:19:30.22+00:00

I have found this solution

https://davidvielmetter.com/tricks/howto-map-drive-without-domain-membership/

That has worked for me
Ramón Martínez 0 Reputation points

2023-09-01T11:25:36.65+00:00

you need to add device with cmd , net use X: \<your shared device> /persistent:yes /savecred . Nex to this ask to you for credentials.

This will make dont ask for credentials again, and you can conect even out of domain if your network can reach device

4 answers

T. Kujala 8,696 Reputation points

2021-05-07T11:51:52.113+00:00

Hi @Prabin Bhusal ,

Have you read this article?

https://learn.microsoft.com/en-us/azure/storage/files/storage-troubleshoot-windows-file-connection-problems
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Sumarigo-MSFT 43,401 Reputation points Microsoft Employee

2021-05-07T15:09:23.933+00:00

@Prabin Bhusal Welcome to Microsoft Q&A Forum, Thank you for posting your query here!

Do you get any error message or error code, If so can you share the screenshot of the error?

This articles provide some insights on your query Mapping a Network Drive to an Azure File Share Using Domain Credentials

You can enable the feature on a new or existing on-premises AD DS environment. Identities used for access must be synced to Azure AD. The Azure AD tenant and the file share that you are accessing must be associated with the same subscription.

Domain-join an on-premises machine or an Azure VM to on-premises AD DS. For information about how to domain-join, refer to Join a Computer to a Domain.

If your machine is not domain joined to an AD DS, you may still be able to leverage AD credentials for authentication if your machine has line of sight of the AD domain controller.

Make sure you have completed the prerequisites:

Enable Azure Active Directory Domain Services authentication on Azure Files

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

-----------------------------------------------------------------------------------------------------------------------------------------------------------------

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Please sign in to rate this answer.
Prabin Bhusal 6 Reputation points

2021-05-10T08:48:49.243+00:00

This means that the AD user object has not synced to the AAD corresponding to the storage account.
Mounting to Azure Files using Active Directory authentication is not supported for AD users who have not been synced to
AAD.

It is showing me this message when I check the Issue.

When I try to connect using one of the User's Username and Password it say the error message.
"The Specified Network Password is Not Correct"

Prabin Bhusal 6 Reputation points

2021-05-10T09:15:25+00:00

No Azure Active Directory user exists with OnPremisesSecurityIdentifier of the currently logged on user's SID (S-1-5-21-4081914295-3719894761-3031614629 -500)

This is the error shown when I check the issue with

>

Blockquote

Powershell

jeevan lal 1 Reputation point

2021-11-03T15:31:42.667+00:00

HI Sumario

what is mean by " if your machine has line of sight of the AD domain " on prem domain should be visible or exposed to internet ? could u please share some lights on this

Sumarigo-MSFT 43,401 Reputation points Microsoft Employee

2021-11-09T04:28:01.087+00:00

@jeevan lal Can you please ask new question with complete details of the issue! I would like to work close on this issue.

Thank you!
Sign in to comment
jeevan lal 1 Reputation point

2021-11-15T23:39:14.53+00:00

Hi HI Sumario,

azure file sync work fine for one prem access , when user work from home they dont have line of sight to on prem AD ,is there any work around to connect azure file shares directly

from internet ? when we connect VPN systems have line of sight to on prem AD ,our requirements is without connecting VPN user azure file share serverless option ,i mean to say

directly access files from internet to azure file share with authentication .

thanks
jeevan
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Ramón Martínez 0 Reputation points

2023-09-01T11:26:38.16+00:00

you need to add device with cmd , net use X: <your shared device> /persistent:yes /savecred . Nex to this ask to you for credentials.

This will make dont ask for credentials again, and you can conect even out of domain if your network can reach device
Please sign in to rate this answer.
Eugene Meenan 0 Reputation points

2024-03-26T11:56:22.76+00:00

I have the problem where the admx policy could most likely work but I have to try to find a way to exclude it from on premises devices as then users mapping won't work.
Sign in to comment

Map Network Drive to Non Domain Joined Computer

4 answers

Blockquote