Forum Discussion

StephanGee's avatar
StephanGee
Steel Contributor
Jun 16, 2026

Windows 11 24H2 Sec Baseline → Broken SSO to on‑prem (Root cause: PKINIT SHA‑1 baseline)

Hi all, I ran into an issue with Entra-joined devices using Windows Hello for Business (Cloud Kerberos Trust) that might help others working with Windows 11 24H2 security baselines. Scenario Wind...
security
security baseline
windows
Amolamolrev's avatar
Amolamolrev
Copper Contributor
Jun 25, 2026

Hey Stephen, Thanks for this detailed article. This is exact issue we are facing. Our scenario is, we want to migrate the on premise file server shares to Azure Files. We joined the Storage account to on prem AD. ie ADDDS based identity. Intune devices are able to map the drive, but prompt for credentials coming. we do not want that. They are very well able to map on premise shares, without prompt. But they are not able to map the Azure File shares from ADDS joined storage account silently. it prompts for credentials and then it maps. Is this the same cause?

  • StephanGee's avatar
    StephanGee
    Steel Contributor
    Jun 25, 2026

    But does it work afterwards? 
    Then it seems not to be related - i am also playing around with Azure Files atm. I also get the popup - if i found a solution for this - i will post it here.
    Back in the days it helped to put the FQDN into the "Intranet" Zone