Forum Discussion
Step by step guide on computer account auth for Azure Files
Have you gotten app attach to work on on azure file share with Azure ADDS? Despite having Azure AD DS enabled on the storage, and the session host's managed identity added to the file share SMB share contributor role and able to mount the file share successfully from the session host and have assign full access in the NTFS permissions for the the session host's account and users, getting an 'Error accessing virtual disk' when trying to enter the msix image path (see screenshot below). Any ideas?
As to the specific question on AADDS being compatible/supported with the portal MSIX AppAttach feature...I’ll let Stefan give the official response ☺️
- JeremyWallaceJan 30, 2021Brass Contributor
Thanks Dean - found a response from Stefan and Tom Hickling on another forum post from earlier this month so I'm guessing its still not a workable scenario at this point.
- ChrisvanazApr 08, 2021Copper Contributor
JeremyWallace , were you able to find a solution for this issue? We have same setup. Cloud only users and AADDS. Can't get MSIX app attach to work. Have you tried a file share on an Azure VM? Not sure what other options there might be. Just looking for ideas. Amazing how hard it's been to find info on this. Usually they will tell you that Hybrid Auth is REQUIRED or something like that but they don't in the documentation. Pretty frustrating. Thanks for any ideas.
- AzureAcademyApr 08, 2021Former Employee
Chrisvanaz I don't believe that MSIX App Attach is supported with Azure AD Domain Services at all today.
I believe part of this limitation is that you don't have any rights in the AADDS Domain to assign NTFS permissions.
- mobilejonFeb 07, 2021Copper Contributor
JeremyWallace I tried the SAS key approach and can't get that to work either. It would be nice if Stefan could give us actual steps.
- Stefan GeorgievFeb 08, 2021Former Employee
mobilejon thanks for the suggestion. We will consider it. Two things to keep in mind we are working on something that may render the need for Azure AD DS obsolete and Azure AD DS has a very low adoption in enterprise (last time I checked less than 3%)