Azure Files
An Azure service that offers file shares in the cloud.
1,382 questions
File Storage accessible from Entra Joined Devices and Entra DS joined servers
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 28.999999999999996%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Bryant Schaper
21
Reputation points
We are in the process of migrating our file servers to Azure Files. The shared use Entra DS for authentication, and can be accessed by on prem endpoints using SMB, however I cannot get the HP MFPs to access the same shares.
I am trying to have a storage solution that I can connect to from both the on prem workstations that are Entra Joined, and from the servers in Azure that are joined to Entra Domain Services. I tried using AD DS for authentication but ran into problems on servers, the workstations I can work around by putting the the <domain>\upn as the user in a script. Same idea does not work the MFPs for some reason.
Any suggestions?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 6%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKD%3C/text%3E%3C/svg%3E)
Keshavulu Dasari 4,110 Reputation points Microsoft External Staff2025-03-05T23:57:45.7666667+00:00 Hi Bryant Schaper ,
I Understand issue is with your HP MFPs accessing Azure Files using Entra Domain Services for authentication. Ensure that your HP MFPs support SMBv2 or SMBv3, as SMBv1 is deprecated and not secure, you can check the printer's documentation or contact HP support for this information.
Make sure that the Kerberos password for the storage account is correctly synchronized and updated. This password is separate from the users' regular Entra account passwords
When configuring the MFPs, ensure that you are using the correct syntax for the network path and that the share-level permissions are correctly assigned For example:
\\<storage-account-name>.file.core.windows.net\<file-share-name>Sometimes, MFA can interfere with the mapping process. Try disabling MFA temporarily to see if it resolves the issue
Ensure that your HP MFPs have the latest firmware updates installed. Firmware updates can sometimes resolve compatibility issues with newer protocols
Verify that the network configuration on the MFPs matches the settings on your servers and workstations. This includes ensuring that the time, date, and time zone settings are synchronized
For more information:
https://learn.microsoft.com/en-us/azure/storage/files/
If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you.
-
Bryant Schaper 21 Reputation points
2025-03-06T00:19:11.25+00:00 We are not using Kerberos, just extra DS, problem seems to be with authentication, I switched to using the storage key and that works. I also have a storage path does not exist there on the printer occasionally as well, so I’m not sure what the printer is doing there I have a few more test to try. I just can’t get it to use an AD account to authenticate.
-
Keshavulu Dasari 4,110 Reputation points Microsoft External Staff
2025-03-06T00:39:29.5733333+00:00 Making progress by using the storage key, but the authentication issue with AD accounts on your HP MFPs is still a challenge. Ensure that your MFPs are correctly configured to use LDAP for authentication. This involves setting up the LDAP server, bind method, and search credentials properly
Some users have found success by switching from "Windows Authentication" to "Simple Bind" for LDAP. This can sometimes resolve issues related to SSL and channel binding, make sure your HP MFPs have the latest firmware and software updates. Sometimes, updates include fixes for authentication issues, Check the network configuration on your MFPs to ensure they can communicate with the LDAP server without any issues. This includes verifying the correct IP addresses, ports, and any necessary certificates for SSL.
If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you.
-
Bryant Schaper 21 Reputation points
2025-03-06T00:54:57.3133333+00:00 So we are using entra DS, it will work with AD DS, but when I did that I had trouble getting entra DS servers in azure from authenticating. That has to happen automatically on logon. It hosts web app but meds access to some smb storage. Tough setup. But I will give it another try.
-
Keshavulu Dasari 4,110 Reputation points Microsoft External Staff
2025-03-07T17:50:51.7333333+00:00 Hi Bryant Schaper,
Ensure that your hybrid identity configuration is correctly set up. This includes proper synchronization between your on-premises AD DS and Entra DS. Tools like Azure AD Connect can help with this, Review your conditional access policies in Entra DS. Sometimes, these policies can inadvertently block access from certain devices or locations
check your network configuration to ensure that there are no firewall rules or network security groups blocking the necessary ports for SMB traffic between your on-premises environment and Azure Ensure that your DNS settings are correctly configured so that both your on-premises.
If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you.
Sign in to comment
Sign in to answer