How I set up Azure Netapp Files with Entra Domain Services

Aroa Lopez Custodio 0

We have deployed a virtual machine infrastructure purely in Entra ID, and for FSLogix profile management, we have deployed an Azure NetApp account. The identities (users) connecting to the infrastructure are both hybrid (from different on-prem domains) and purely cloud-based. Is there any procedure to configure this scenario?

For Now with this configuration, the users are unable to authenticate to the volumes, and the other two options of authentications are not viable in our environment (ADDS: The users are from different domains & Kerberos: No supported for purely cloud identities).

Could you please help with finding a solution for this configuration issue? Thank you all in advance.

Syed Aaqid Ali 10 Reputation points Microsoft Vendor

2025-02-05T18:13:10.5666667+00:00
Hi Aroa Lopez Custodio,

Greetings & Welcome to Microsoft Q&A forum! Thanks for posting your query!

To set up Azure NetApp Files with Microsoft Entra Domain Services in your scenario, you need to ensure that your virtual machines (VMs) are domain-joined to Microsoft Entra Domain Services. This is crucial because Azure NetApp Files requires identity-based authentication, and it supports Microsoft Entra Domain Services for cloud-only identities.

Since your users are a mix of hybrid and cloud-only identities, kindly follow these below steps:

Enable Microsoft Entra Domain Services: Ensure that Microsoft Entra Domain Services is enabled in your Azure environment. This will allow your cloud-only identities to authenticate.

Domain-Join Your VMs: The VMs that will access Azure NetApp Files must be domain-joined to the Microsoft Entra Domain Services hosted domain. This is essential for the authentication process.

Configure Azure NetApp Files: Once your VMs are domain-joined, configure Azure NetApp Files to use Microsoft Entra Domain Services for authentication. This will allow users to authenticate using their Microsoft Entra credentials.

Ensure that the necessary permissions are set for the users accessing the Azure NetApp volumes. This includes verifying that users have the appropriate access rights to the file shares. After configuration, test the authentication process with both hybrid and cloud-only users to ensure they can access the Azure NetApp volumes successfully.

If you have already followed these steps and users are still unable to authenticate, double-check the domain-joining process and the permissions assigned to the users.

References:

Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files

Enable Microsoft Entra Domain Services authentication on Azure Files

Overview of Azure Files identity-based authentication for SMB access

If you have any other questions or are still running into more issues, let me know in the "comments" and I would be happy to help you.
Aroa Lopez Custodio 0 Reputation points

2025-02-06T01:04:26.6233333+00:00

Thank you for your quick response! Right after posting the question I tried while deploying to join the VMs within Entra Domain Services in our AVD environment and the cloud based users can authenticate without problems in both Virtual Desktop and Netapp files. Now the next problem is to solve how the hybrid users can authenticate to Virtual desktop, as the managed domain is not valid for authentication. I will check the links you posted to see if it could give me any clue, and thanks in advance if you have more info about this kind of AVD authentication within Entra Domain Services for hybrid users.

1 answer

Nikhil Duserla 4,280 Reputation points Microsoft Vendor

2025-02-07T10:53:34.7266667+00:00

Hi @Aroa Lopez Custodio,

In additional to Syed Aaqid Ali, sharing insights on hybrid for Azure Virtual Desktop supports hybrid identities through Microsoft Entra ID, including identities that are federated by using AD FS. You can manage these user identities in AD DS and sync them to Microsoft Entra ID by using Microsoft Entra Connect. You can also use Microsoft Entra ID to manage these identities and sync them to AD DS.
Please sign in to rate this answer.
Nikhil Duserla 4,280 Reputation points Microsoft Vendor

2025-02-10T08:23:22.2433333+00:00

Hi @Aroa Lopez Custodio,

Checking to see whether you have resolved the issue with the solution provided above, or if you need any further assistance, please let us know. We are happy to help.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How I set up Azure Netapp Files with Entra Domain Services

1 answer

Your answer