Skip to content

Prerequisites For Azure Files

Warning

When working with Azure Files, the following items must be in place for NTFS permissions and NTFS replication to work:

  • Azure Active Directory Domain Services authentication MUST be enabled on Azure Files.
  • Azure Active Directory Domain Services MUST be enabled on the Azure tenant.

Share-level permissions are the high-level gatekeeper that determines whether a user can access the share. In comparison, NTFS permissions act more granularly to determine what operations the user can do at the directory or file level. Without the correct share-level permissions required before you modify the NTFS permissions.

Requirements

  • Full administrative control of a file share, including the ability to take ownership of a file, requires using the storage account key. Full administrative control isn't supported with identity-based authentication.
  • Assign share-level permissions for Azure file shares

To replicate Owner Permissions, you MUST follow the steps provided in the section.

How to find my Mount command

  1. You can find data storage and file shares on your Azure files management page.
  2. Select your File share on the right side, and you will see three dots. Click Connect.
  3. Pick Windows and Storage Account Key.
  4. Click Show Script.
  5. Copy the section between

    # Save the password so the drive will persist on reboot

    and

    # Mount the drive

  6. Use these lines to fill in the next steps.

Mounting Azure Files with Storage Account Key - Script job

  1. Create a New Script Job
  2. Under the Script section, select Run AS Powershell
  3. Replace line 3 with your script from the Azure storage account.
  4. Copy the section between

    # Save the password so the drive will persist on reboot

    and

    # Mount the drive

  5. Set your Job Schedule for when and how often the job should run.

  6. When at the Summary Tab, Save and run your job manually for the first time.
  7. If you get access denied with the key from Microsoft, change localhost to azure.