SOLVED

Azure Files and ABE (access based enumeration)

%3CLINGO-SUB%20id%3D%22lingo-sub-1740181%22%20slang%3D%22en-US%22%3EAzure%20Files%20and%20ABE%20(access%20based%20enumeration)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1740181%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20Azure%20Files%20shares%20support%20Access%20Based%20Enumeration%3F%20It%20seems%20it%20does%20not.%20If%20I%20was%20to%20use%20Azure%20Sync%20and%20front%20end%20with%20a%20Windows%20Server%20can%20I%20use%20ABE%20on%20the%20file%20share%3F%20This%20is%20a%20deal%20breaker%20as%20we%20use%20ABE%20on%20our%20shared%20folder.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1749793%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20Files%20and%20ABE%20(access%20based%20enumeration)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1749793%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F3471%22%20target%3D%22_blank%22%3E%40PMLIO%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20far%20as%20I%20know%2C%20ABE%20is%20a%20feature%20of%20DFS-N.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20want%20to%2C%20you%20can%20%3CSTRONG%3Eintegrate%20Azure%20File%20shares%20into%20your%20existing%20DFS%20Namespace%3C%2FSTRONG%3E%20(that%20has%20ABE%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fstorage%2Fdfs-namespaces%2Fenable-access-based-enumeration-on-a-namespace%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Eturned%20on%3C%2FA%3E)%2C%20this%20is%20supported%2C%20but%20Azure%20Files%20are%20not%20providing%20DFS-N%20capabilities.%20%3CEM%3EPlease%20note%2C%20that%20DFS-R%20is%20not%20supported%20with%20Azure%20Files.%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20will%20need%20to%20first%20enable%20identity-based%20authentication%20in%20Azure%20Files%20using%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fstorage%2Ffiles%2Fstorage-files-active-directory-overview%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ethis%20guide%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi,

 

Does Azure Files shares support Access Based Enumeration? It seems it does not. If I was to use Azure Sync and front end with a Windows Server can I use ABE on the file share? This is a deal breaker as we use ABE on our shared folder.

 

Thanks

2 Replies
Highlighted
Best Response confirmed by PMLIO (Contributor)
Solution

Hi @PMLIO ,

 

As far as I know, ABE is a feature of DFS-N.

 

If you want to, you can integrate Azure File shares into your existing DFS Namespace (that has ABE turned on), this is supported, but Azure Files are not providing DFS-N capabilities. Please note, that DFS-R is not supported with Azure Files.

 

You will need to first enable identity-based authentication in Azure Files using this guide.

Highlighted

@David Pazdera Thanks will try this out.