question

SPD-4842 avatar image
0 Votes"
SPD-4842 asked SPD-4842 answered

ERROR 5 (0x00000005) Access denied while Moving On-Prem File Share Data to an Azure File Share

Hi Team - Getting access denied error and unable to copy NTFS permission while performing robocoy to move the on-prem data to Azure storage file share. Azure File share is domain join and having require SMB elevated contri and overall owner permission. Owner for source on-prem folder as well. Tried diff switch like /B / ZB /COPY:DATSO but no luck. Only data is being copied, not the permission. Tried all the options suggested in below forum with no luck,

https://docs.microsoft.com/en-us/answers/questions/447291/azure-file-share-ntfs-acces-denied.html
https://docs.microsoft.com/en-us/answers/questions/271816/access-is-denied-while-copies-files-from-a-remote.html
https://www.reddit.com/r/AZURE/comments/nyah1r/cannot_use_robocopy_to_bring_over_ntfs/
https://community.spiceworks.com/topic/2256785-robocopy-access-denied-even-as-a-backup-operator

Any other suggestion to fix this please ??

Thanks in advance

azure-files
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SPD-4842 avatar image
0 Votes"
SPD-4842 answered

Thanks @Sumarigo-MSFT,

Follow the steps but still we were unable to copy the permission through robocopy and we are using AD authentication, not the Azure AD.


Anyways, just to add, We were able to copy the permission through Robocopy after disabling the secure file transfer on Storage account level. Hope this will help others as well.

Ref
https://docs.microsoft.com/en-us/azure/storage/common/storage-require-secure-transfer


Thanks,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SumanthMarigowda-MSFT avatar image
0 Votes"
SumanthMarigowda-MSFT answered

@SPD-4842 For testing purpose can you use Azure File Sync Service Create a directory on the cloudendpoint “Azure file share” and run the below command to force detect the change and the folder was synced successfully to the on-prem share
Invoke-AzStorageSyncChangeDetection -ResourceGroupName "myResourceGroup" -StorageSyncServiceName "myStorageSyncServiceName" -SyncGroupName "mySyncGroupName" -CloudEndpointName "myCloudEndpointName" -Path "Data","Reporting\Templates"

Changing the quota for the file share takes effect immediately
Guided to use Azure File Sync, AzCopy or Robocopy to move files with respective permissions. Migrate to Azure file shares https://docs.microsoft.com/en-us/azure/storage/files/storage-files-migration-overview#migration-toolbox

If you are using Azure AD credentials, start using Storage Account Key (You can check in the link below under share-level permissions. Control access to Azure file shares - on-premises AD DS authentication | Microsoft Docs)

I wish to engage with you offline for a closer look and provide a quick and specialized assistance, please send an email with subject line “Attn:subm” to AzCommunity[at]Microsoft[dot]com referencing this thread and the Azure subscription ID, Storage account Name and Azure Azure storage file share, I will follow-up with you. Once again, apologies for any inconvenience with this issue.

Thanks for your patience and co-operation.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.