Syncing ADDS joined Azure Files NTFS permission to FileSync Server

Mahesh Mahi 46 Reputation points
2021-01-15T15:55:03.73+00:00

Hi There,

Has anyone integrated ADDS joined Azure Files with File Sync Server? I have a situation where NTFS level permissions set on Azure FileShare are not coming down to the Sync server, neither visible nor has any affect.

When I directly mount the azure file share on a PC, I have Full/Write/Read permissions according to the NTFS level permissions set on the Azure Fileshare. But I when mount to the fileshare on the sync server (configured to sync the content from Azure file share) I get only list and read permission, also I don't see any ALCs coming down from Azure file share to the files and folders part of the sync.

Am I missing something here?

I have set-up the platform using the Microsoft documents:
https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable
https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-configure-permissions

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,156 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. deherman-MSFT 33,141 Reputation points Microsoft Employee
    2021-01-15T23:30:37.853+00:00

    @Mahesh Mahi
    Changes made to the Azure file share by using the Azure portal or SMB are not immediately detected and replicated like changes to the server endpoint. Azure Files does not yet have change notifications or journaling, so there's no way to automatically initiate a sync session when files are changed. On Windows Server, Azure File Sync uses Windows USN journaling to automatically initiate a sync session when files change. To detect changes to the Azure file share, Azure File Sync has a scheduled job called a change detection job. A change detection job enumerates every file in the file share, and then compares it to the sync version for that file. When the change detection job determines that files have changed, Azure File Sync initiates a sync session. The change detection job is initiated every 24 hours. See the FAQ for more information.

    To immediately sync files that are changed in the Azure file share, the Invoke-AzStorageSyncChangeDetection PowerShell cmdlet can be used to manually initiate the detection of changes in the Azure file share.

    Hope this helps. Let us know if you have further questions or issues.

    -------------------------------

    Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.