Azure Unblogged - Replace your file server with a serverless Azure file share!

Hi , is there a possibility to leverage the AAD Conditional access on top of AAD Authentication ? I understood this feature is in private preview. While we are waiting for this feature to be released are there any workarounds for allowing users based on geolocation to access a file share ? 

When will Azure files AD Authentication over SMB be available to Macbooks? We have a few Mac users in our organization and this is the last hurdle stopping us from making the move.

thomasmaurer , great subject. We're running a POC (along with a Sharepoint migration project) for Azure File Shares in our environment as our on-premise storage for unstructured data is soon to be end of life. We'll need to implement DFS-N as we have around 12 file servers and around 40Tb of data that need to preserve their file paths. Is Azure File Share a viable product for this proof of concept? Are the templates available anywhere as I haven't been able to source them?

.@jcaplan - thank you, that is good to know. 

Frank_Boyd  - yes, you can use Robocopy and it can maintain the NTFS permissions with the right parameters, see https://docs.microsoft.com/en-us/azure/storage/files/storage-files-migration-overview#migration-toolbox

Interesting. If we mount an Azure file share to an existing on premises file server, can we use robocopy to copy the files over along with the permissions automatically; this would really help with migration?

I came up with a checklist that I used to migrate from an on-premise traditional file share to a pure Azure Files share. Check it out at https://docs.google.com/spreadsheets/d/e/2PACX-1vQXRbzYReH3gjNcX6K15lidIgMqwoD1TtfU4kS47zLb231ImfaGD-HWEAaldGteZfowJwC8skqEbLDP/pubhtml

Beamex did you ever track anything down on this? Just curious if you had, as I'm getting ready to embark on a deployment for a client and would love guidance from anyone who has more information on this.

So when/where are these ARM templates available? I've searched high and low to find them....plz provide links ASAP

Additionally, I've found guidance which creates a primary DNS zone on premises for privatelink.core.windows.net and then creates an A record for the storage account to point at the IP of the private endpoint. There's a lot less obfuscation in this methods than in what your video shows...what are the benefits/drawbacks of either method? I usually go with the keep it simple way of things if I can....so not deploying multiple VMs to handle conditional DNS forwarding seems ideal in my way of thinking.

Thanks!

This is awesome! - those ARM templates though?  - Deeplink please 🙂