Forum Discussion

Amit_Trivedi112214's avatar
Amit_Trivedi112214
Copper Contributor
Jun 19, 2020

Azure Files - Map file share on Azure AD joined machine

Hello, 

 

We know articles says there is restrictions for mapping Azure File share on Azure AD Joined machine as per MS article.

"Neither Azure AD DS authentication nor on-premises AD DS authentication is supported against Azure AD-joined devices or Azure AD-registered devices."
 
Is there any workaround ? Or Does anyone know if that feature is in development or coming soon as preview ?
 
Thanks!

11 Replies

  • Amit_Trivedi112214 

     

    Azure Files team is working on adding support for AAD joined/registered machines but we have no ETA to share. For SMB mounts, you could use storage account key to map the drive from these AAD joined machines today.

      • John_Francis's avatar
        John_Francis
        Copper Contributor
        Is there a way to map it like a drive mapping using Group Policy like the regular drive letters instead of all these PS and other stuff, that has to be done?
    • Tomasz Foltman's avatar
      Tomasz Foltman
      Copper Contributor

      Mike_Emard 

      Hi, is there any progress on this subject in recent months?

       

      It would make perfect sense for fully cloud managed systems and finally allow us to drop servers. I bet I'm not the only one.

  • rohanislam's avatar
    rohanislam
    Brass Contributor
    You should still be able to mount the share on an Azure AD registered device using SAS key.
    • stedurbin's avatar
      stedurbin
      Copper Contributor

      rohanislamI'm assuming a SAS key is like an API key?

       

      Thanks for the feedback.


      Whilst that would no doubt work; the reason for using existing credentials is to simplify the user experience for a non-technical user audience. Asking a user of an average Enteprise IT environment to use an API key is messy. It also opens up a new security concern with regards to key management practices.

      I don't imagine that would gain traction in our environment.

      Personally, I'd leave the API key access model to developers and more technical end users.

       

      • rohanislam's avatar
        rohanislam
        Brass Contributor
        At this stage, I don't see any other option. Maybe you can see if you can programmatically map it on your users PC without asking them to map it using SAS key.
        You can generate a SAS key having mimimum required permission with an expiry date.

Resources