Forum Discussion
Azure Files and ABE (access based enumeration)
- Oct 06, 2020
Hi Aragorn ,
As far as I know, ABE is a feature of DFS-N.
If you want to, you can integrate Azure File shares into your existing DFS Namespace (that has ABE turned on), this is supported, but Azure Files are not providing DFS-N capabilities. Please note, that DFS-R is not supported with Azure Files.
You will need to first enable identity-based authentication in Azure Files using this guide.
Hi Aragorn ,
As far as I know, ABE is a feature of DFS-N.
If you want to, you can integrate Azure File shares into your existing DFS Namespace (that has ABE turned on), this is supported, but Azure Files are not providing DFS-N capabilities. Please note, that DFS-R is not supported with Azure Files.
You will need to first enable identity-based authentication in Azure Files using this guide.
- unitismNov 10, 2021Copper ContributorAragorn did you ever get this to work?
Just trailing Azure File Shares atm and noticed ABE is not working like it does with our Windows File Shares.
Thanks- AragornMar 07, 2022Iron Contributor
unitism I was able to solve this by using Azure File Sync with Cloud Tiering. This way users still connect to my file share presented on the server which serves as an endpoint but the files are tiered on Azure Files. I also domain joined the storage account so I can enforce ACLs directly on the AZ file share. I tested ABE and can confirm it works when accessing via the server endpoint share even when tiered to the cloud.
https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-introduction
- Champ14-1020Nov 25, 2021Brass ContributorWould like to know, if this already works to everyone? I have tried this, added the File Share to DFS-N and it was pushed down, but the folders who I doont have access with is still showing, am I missing something?
- unitismNov 25, 2021Copper ContributorHi Champ, I raised a ticket with MS Support about this and ABE Is currently not supported with Azure File Shares, even when using your own DFS-N. It is apparently on their roadmap, but not eta.