Hey everyone! I've recently taken over a setup involving a Windows Server 2022 Azure Edition that's Entra joined and hosted in Azure. This server has a few Windows file shares that our office accesses through a Site-to-Site VPN tunnel. The users connect to these shares from Windows 11 Pro machines that are part of an Active Directory domain. I'm curious about how the authentication process works for these SMB file shares. Any insights would be greatly appreciated! Thanks!
3 Answers
Consider using Azure Files instead of managing a whole virtual machine. While it doesn’t directly answer your authentication question, it could simplify your setup and reduce costs significantly!
Have you checked into how the file shares are being mapped for those users? It could be leveraging Azure AD DS, or they might be using local accounts to connect. That might shed some light on the authentication process!
It sounds like you might be dealing with cloud Kerberos trust here. If that’s the case, it allows Entra joined devices to authenticate and access on-prem resources, but in your situation, you have AD joined devices trying to reach Entra joined servers. So, figuring out that authentication path is key!
Exactly! The setup goes the other way around, which can complicate things a bit. You need to dig into how those devices are communicating.