Azure Files - AD Join

Question

Hey Folks,

We currently use Azure files for all user data storage, but it was setup as a premium solution by my predecessor and to save money i've been tasked with creating a cheaper solution (on spinning disk without caching etc).

My question is, i'm planning to put it in the same resource group as the existing solution and I just wanted to check that running the Join-AzStorageAccountForAuth command where you specify the resourcegroupname, name and domainaccounttype wouldn't affect the existing solution?

Additionally i'm assuming the entry in AD should just be a user account (or a computer account if you choose that) with the exact name of the storage account. My predecessor ran a POC before he left but I can't see where that account is in AD.

Thanks Guys

Answer 1

No, it will not affect the existing setup as you will be creating a new storage account and authorising this account. The script will create a computer account for you automatically so this new storage account will have a different computer account created for it. I recommend to use computer accounts just note the password expiration setting below. https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable#run-join-azstorageaccount

Answer 2

Thats great thanks Alan, I just wanted a bit of a sanity check before I went ahead.

I am curious why you'd recommend a computer account over a service account though, only because I can set the password to not expire on a service account.

Thanks again.