{"id":773,"date":"2020-02-24T00:00:00","date_gmt":"2020-02-24T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/preview-of-active-directory-for-authentication-on-azure-file"},"modified":"2025-06-29T13:13:59","modified_gmt":"2025-06-29T20:13:59","slug":"preview-of-active-directory-for-authentication-on-azure-file","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/preview-of-active-directory-for-authentication-on-azure-file\/","title":{"rendered":"Preview of Active Directory authentication support on Azure Files"},"content":{"rendered":"\n
Updated June 15, 2020<\/strong>: Azure Files AD DS Authentication was released for general availability on June 11, 2020. Please see the post here<\/a> from more details. <\/div>\n\n\n\n

We are excited to announce the preview of Azure Files Active Directory (AD) authentication. You can now mount your Azure Files using AD credentials with the exact same access control experience as on-premises. You may leverage an Active Directory domain service (AD DS) either hosted on-premises or on Azure for authenticating user access to Azure Files for both premium and standard tiers. Managing file permissions is also simple. As long as your Active Directory identities are synced to Azure AD, you can continue to manage the share level permission through standard role-based access control<\/a> (RBAC). For directory and file level permission, you simply configure Windows ACLs (NTFS DACLs)<\/a> using Windows File Explorer just like any regular file share. Most of you may have already synced on-premises Active Directory to Azure AD as part of Office 365 or Azure adoption and are ready to take advantage of this new capability today.<\/p>\n\n\n\n

When you consider migrating file servers to the cloud, many may decide to keep the existing Active Directory infrastructure and move the data first. With this preview release, we made it seamless for Azure Files to work with existing Active Directory with no change in the client environment. You can log into an Active Directory domain-joined machine and access Azure file share with a single sign-on experience. In addition, you can carry over all existing NTFS DACLs that have been configured on the directories and files over the years and have them continue to be enforced as before. Simply migrate your files with ACLs using common tools like robust file copy (robocopy) or orchestrate tiering from on-premises Windows file servers to Azure Files with Azure File Sync<\/a>. We have also released a video that walks through the end to end setup of replacing an on-premises server with Azure Files including AD authentication.<\/p>\n\n\n\n

With AD authentication, Azure Files can better serve as the storage solution for Virtual Desktop Infrastructure (VDI) user profiles. Most commonly, you have set up the VDI environment with Windows Virtual Desktop as an extension of your on-premises workspace while continue to use Active Directory to manage the hosting environment. By using Azure Files as the user profile storage, when a user logs into the virtual session, only the profile of the authenticated user is loaded from Azure Files. You don\u2019t need to set up a separate domain service for managing storage access control experience for your VDI environment. Azure Files provides you the most scalable, cost-efficient, and serverless file storage solution for hosting user profile data. To learn more about using Azure Files for Windows Virtual Desktop scenarios, refer to this article<\/a>.<\/p>\n\n\n\n

What\u2019s new?<\/h2>\n\n\n\n

Below is a summary of the key capabilities introduced in the preview:<\/p>\n\n\n\n