Azure Storage File Access security issue on AD joined windows - Failed to enumerate objects in the container. Access is denied.

Question

his question belongs to those who implemented or Enabled Local Active Directory SMB Authentication for Azure files on the om-prem environment!

I'm trying to change the permissions of one folder to make it "read-only access" for authenticated or domain users. When I try to change the permission from the advance settings or when I try to disable the inheritance, the system throws the error: "Error Applying Security - An error occurred while applying security information to Failed to enumerate objects in the container. Access is denied."

Any ideas on how to fix it?

Answer 1

@MohammadAkbarKarimi-3756 Thank you for reaching out to Microsoft Q&A. I understand that you are having issues with changing permissions of a folder for your Domain Users where you get the error that the Access is Denied.

Please verify if the user has the right permissions to the access the resource:

1. Verify correct RBAC role on share.
2. Verify the user has correct NTFS permissions to the resource.
3. Verify the user has correct share permission to the resource.

Please go through this document for more details: Configure directory and file level permissions over SMB
Also go through the Troubleshooting guide: Troubleshoot Azure Files problems in Windows (SMB)

Once you try the above solution, please do let us know if you still have further issues and we will be glad to assist further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.

Answer 2

SaiKishor-MSFT - Great and thanks for the explanation!