Azure-Samples / azure-files-samples

This repository contains supporting code (PowerShell modules/scripts, ARM templates, etc.) for deploying, configuring, and using Azure Files.
https://docs.microsoft.com/azure/storage/files/storage-files-introduction
MIT License
226 stars 192 forks source link

AzFileDiagnostics.ps1 map drive success but map drive from Windows Explorer failed using any Azure AD accounts. WARNING info from AzFileDiagnostics.ps1 not relevant. #150

Open pnguyenRCUS opened 1 year ago

pnguyenRCUS commented 1 year ago

Hello, I am unable to map a drive from Windows Explorer to Azure File Shares using any Azure AD accounts (getting error, "The specified network password is not correct") but have no issue mapping drive from Windows Explorer using Storage Account Key. The File Shares is configured with R/W permissions to Azure AD authenticated users.

This is a cloud only setup and the File Shares is configured to use Azure AD Service, no on premise AD.

Attached is the AzFileDiagnostics.ps1 diagnostic result. It has the warning below, however information in link is not relevant as the article Applies To: Windows Server 2008 R2, and I am running Windows 10 or Server 2019.

I need help resolving mapping issue from Windows Explorer using Azure AD accounts. Thanks

--- below is snippet from AzFileDiagnostics.ps1 output --- azfileDiag-resultRedacted-success-WindowsExplorerMapFailed.txt

[OK]: Validation is done and Mapped drive is created successfully [WARNING]: Map drive in admin session successfuly.If you cannot see the mapped drive in File Explorer, you can follow steps in https://technet.microsoft.com/library/ee844140.aspx to configure the EnableLinkedConnections registry value.

pnguyenRCUS commented 1 year ago

Per https://learn.microsoft.com/en-us/troubleshoot/azure/azure-storage/files-troubleshoot-smb-authentication?tabs=azure-portal#error-5-when-mounting-an-azure-file-share, I ran Debug-AzStorageAccountAuth -StorageAccountName $StorageAccountName -ResourceGroupName $ResourceGroupName -Verbose from an Azure AD joined Windows, but looks like this diagnostic command is for on premise AD joined only. Is there a different command for diagnosing from Azure AD connected domain?

azfileHybrid-debug-result-redacted.txt