Forum Discussion

Aragorn's avatar
Aragorn
Iron Contributor
Oct 02, 2020
Solved

Azure Files and ABE (access based enumeration)

Hi,   Does Azure Files shares support Access Based Enumeration? It seems it does not. If I was to use Azure Sync and front end with a Windows Server can I use ABE on the file share? This is a deal ...
  • pazdedav's avatar
    pazdedav
    Oct 06, 2020

    Hi Aragorn ,

     

    As far as I know, ABE is a feature of DFS-N.

     

    If you want to, you can integrate Azure File shares into your existing DFS Namespace (that has ABE turned on), this is supported, but Azure Files are not providing DFS-N capabilities. Please note, that DFS-R is not supported with Azure Files.

     

    You will need to first enable identity-based authentication in Azure Files using this guide.

unitism's avatar
unitism
Copper Contributor
Nov 10, 2021
Aragorn did you ever get this to work?
Just trailing Azure File Shares atm and noticed ABE is not working like it does with our Windows File Shares.
Thanks
Aragorn's avatar
Aragorn
Iron Contributor
Mar 07, 2022

unitism I was able to solve this by using Azure File Sync with Cloud Tiering. This way users still connect to my file share presented on the server which serves as an endpoint but the files are tiered on Azure Files. I also domain joined the storage account so I can enforce ACLs directly on the AZ file share. I tested ABE and can confirm it works when accessing via the server endpoint share even when tiered to the cloud.

 

https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-introduction

Resources