Azure AD Joined Machine unable to access on premise DFS Namespace

Question

Azure AD Joined Machine unable to access on premise DFS Namespace

Debendra Desudu 1

VipulSparsh-MSFT 16,306 Reputation points Microsoft Employee

2021-07-28T06:07:53.847+00:00

@Debendra Desudu Can you help us understand, how are you trying to access the DFS.
Is it with the netbios name or a domain name (which is resolved by your local DNS )

Please do confirm if the FQDN works while accessing your DFS as the netbios name might not work. Or if you have not tried with the FQDN and please share the results.
Debendra Desudu 1 Reputation point

2021-07-28T09:10:49.49+00:00

HI @VipulSparsh-MSFT ,
I'm able to access our DFS servers by \servername\shares$, but when i am trying to access \domain.com\shares$ then only showing to all shared folders but it's not accessible.
Anshul Kumar (MINDTREE LIMITED) 6 Reputation points

2021-10-11T14:20:07.757+00:00

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

1 answer

Your answer

VipulSparsh-MSFT 16,306 Reputation points Microsoft Employee

2021-07-28T06:07:53.847+00:00

@Debendra Desudu Can you help us understand, how are you trying to access the DFS.
Is it with the netbios name or a domain name (which is resolved by your local DNS )

Please do confirm if the FQDN works while accessing your DFS as the netbios name might not work. Or if you have not tried with the FQDN and please share the results.
Debendra Desudu 1 Reputation point

2021-07-28T09:10:49.49+00:00

HI @VipulSparsh-MSFT ,
I'm able to access our DFS servers by \servername\shares$, but when i am trying to access \domain.com\shares$ then only showing to all shared folders but it's not accessible.
Anshul Kumar (MINDTREE LIMITED) 6 Reputation points

2021-10-11T14:20:07.757+00:00

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

Answer 1

VipulSparsh-MSFT 16,306 Microsoft Employee

@Debendra Desudu Thanks for reaching out.

The DFS roots cannot use Kerberos for authentication. you have to connect to Dfs nested share via the server name itself. Expected behavior with AAD joined machines.

-----------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Derek Heiser 0 Reputation points

2024-02-12T21:01:41.3466667+00:00

I don't think this is the case anymore with Cloud Kerberos trust... AADJ machines should be able to get a Kerberos key while on premises (which is how things like Windows Hello for Business can work on AADJ machines that synchronize with a domain).

Share via

Azure AD Joined Machine unable to access on premise DFS Namespace

1 answer

Your answer