Azure Files - NTFS permissions and ADD-Joined devices

Question

We would like to make use of Azure Files but require the ability to set NTFS permissions against files/folders. As we do not have any AD Domain controller (ie: we're full Azure AD cloud) i have deployed Azure ADDS. All our users have M365 Business Premium licenses and their Win10 laptops are Azure AD Joined (all laptops are also enrolled into Intune). According to the documentation below, the prerequisites say:

To access a file share by using Azure AD credentials from a VM, your VM must be domain-joined to Azure AD DS.

Does this mean we can only use NTFS permissions with Azure Files if the client devices are AD joined rather than Azure AD Joined?

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-domain-service-enable?tabs=azure-portal

Any advise or feedback would be appreciated.

Answer 1

Yes it does, the devices need to be domain joined to the Azure AD DS service, but note below that the devices would also need to be Azure VMs themselves. This particular feature is really intended for an Azure hosted solution such as Azure Virtual Desktop.

Answer 2

Ah ok, that's disappointing.
Thanks for taking the time to clarify ;)

Answer 3

Is it still true?

I understand that in order to use Azure Files with NTFS rights from Entra ID joined PCs, we need:

• either have a local AD connected to entra
• Or use Azure Virtual desktops

Right?

Thierry C.