Map Azure File Share to Physical Windows Machine (Non Azure Hosted)

Shane Temple 1 Reputation point
2022-07-04T13:22:50.89+00:00

Hi,

I'm having trouble understanding how Microsoft want you to access Azure File Shares. I get that storage account keys are effectively "complete access" but in my scenario I have users in Azure AD (AAD DS identity enabled) and no on prem domain exists to sync back and forth to.

So how do I map an azure file share that I've created to a windows machine, laptop or VM that sits within my local network?

Authentication with the Azure AD email and password doesn't seem to work (Port 445 test does succeed so that's not an issue).

If this is not possible like I'm getting the feeling it does not, how do I map a drive on a local machine and have ACL's apply so that I'm not giving all users access to all folders?

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,169 questions
Azure Storage Explorer
Azure Storage Explorer
An Azure tool that is used to manage cloud storage resources on Windows, macOS, and Linux.
231 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,716 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
670 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Alan Kinane 16,786 Reputation points MVP
    2022-07-04T13:39:50.45+00:00

    Have a read of this document. You really need to use Active Directory Domain Services synced to your Azure AD environment to achieve what you are looking for, there is no native Azure AD access control for Azure Files today. You can use AAD DS also but you need to have your on premises devices joined to this managed domain which is not really recommended.

    https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview
    217421-image.png