Master Azure Files with NTFS and Entra Domain Services

In this tutorial, learn how to configure NTFS permissions for an Azure Files share using Microsoft Entra Domain Services (DS). We'll compare this process with traditional Windows AD and explore key differences, including how Entra DS simplifies storage account integration. From configuring share-level permissions with Azure RBAC roles to managing NTFS permissions on an Entra DS domain-joined computer, this step-by-step guide will help you understand everything you need to know. Don’t forget to like and subscribe for more insights on Azure cloud, Entra ID, and hybrid identity solutions! #MicrosoftAzure #AzureFiles #EntraDomainServices #AzureTutorial #AzureAD #EntraID #CloudComputing:

00 - Start
04:02 - Connectivity Test
06:17 - Enable Entra DS Authentication
07:17 - Set Share-Level Permissions
10:08 - Set NTFS Permissions
12:15 - Test NTFS Access

Links
Free Azure guide! Subscribe to the newsletter

Zero to Hero with Azure Virtual Desktop

Hybrid Identity with Windows AD and Azure AD

Windows 365 Enterprise and Intune Management

Don't Use Entra Domain Services to Replace Windows Active Directory

Deploy Entra Domain Service and Join a Server to the Domain

A Beginners Guide to Azure File Shares

[DanSaw-pz]

Posted 1 day ago, nice. Talk about perfect timing haha.

[Daltonson]

If I have Azure Fileshares on one Azure Tenant but another Tenant that actually has the users in Entra will Entra Domain Services work? or does it only work for a single tenant not multiple tenants?

[ilovesandyboy]

Thanks for the video Travis. Could you please give an advice on how to deploy this PowerShell script with storage account key with Intune on multiple servers in my AVD host pool?

[dionvermeulen]

This is only meant for Azure vm’s like AVD, right? This can AFAIK nog be used on local workstations.

[satishd]

Great....Can i access filshare using Entra ID from AVD machines which are joined in microsoft AD

[sweet]

Im having alot of trouble with this. If the computer is not joined to entra DS but entra ID cloud, how do i map the storage account? I can map with keys but i need to use entra ID credentials to use the NTFS permissions. Im understanding that your vm is already in the same resource group as the storage account.

[ythalorossy]

Hi Travis, would be great to have a step by step of how to configure it inside on Azure Virtual Desktop.
Looks a lot of people, including me, are facing issues to connect from AVDs to Azure Files.

In my case, I got the following error, that, as I understood, says that the logged user or AVD are not able to connect.
`The specified network password is not correct`

[jalalhaider]

I followed with you video, when we do that azure file sharing for mapped drive it clearly says storage keys way is for admins where as either hybrid or azure domain joined is preferred way for end users but you went with keys first why is that so? Can you please make a remake of this video in which client is using azure vm, using his credentials which is domain azure domain joined, imagine it like on prem ad where any user can login to any pc on domain using his credentials, and so how to map a drive for client on azure vm joined to azure ad (on-line)?

Many thanks

[edwinsoh]

Hi, I follow your steps, but I’m not able to add ntfs permissions in windows explorer. I was able to map the network with the script using storage account credentials. Any advise? Thanks in advance