Problem mapping SMB drive shares in Azure for Entra-joined users

GregE97 0

The frustrating part of this is that I had it working before the Holidays.

My use case is only for the Users who are Entra-joined only. The computers I have tested with are Entra-joined. This is not for hybrid-joined users or computers. Entra Domain Services are running.

I changed the authentication method to the middle option for Entra, assigned my desired User Group to have SMB contributor permissions, and tried to run the provided PS script from a computer which is Entra-joined with my user account. (It's in the Group.)

I get the error "\mystorage.xx.xx.windows.net\mydrive\myshare" either does not exist or is not a folder.

Event Viewer does show the PowerShell script executing.

A 'net use' in CMD fails saying "The network name cannot be found." However I can get an IP if I do an nslookup. I am using 8.8.8.8 for my DNS.

Port 445 is open in the firewall and I see no traffic during my attempts which would block it.

1 answer

Andreas Baumgarten 115.9K Reputation points MVP

2025-01-06T18:01:56.1+00:00

Hi @Greg Ernest - Admin ,

if my understanding is correct you are using Azure Files?

In my opinion the path to the share should be: \\<name of the storage account>.file.core.windows.net\<name of the share>

Maybe you can give it a try.

How does the network settings of the Storage Account look like?

Do you allow public access? Or did you use the setting Enabled from selected virtual networks and IP addresses?

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten
Please sign in to rate this answer.

1 person found this answer helpful.
GregE97 0 Reputation points

2025-01-06T18:34:49.43+00:00

Andreas,

Thanks for your reply.

Yes, I am using a path like that. Azure provides you with the PS script to do the drive mounting. That is what's failing.

Yes, I have public access on at this point. I will have users off-site which will be using the drives I am setting up.

-Greg

Andreas Baumgarten 115.9K Reputation points MVP

2025-01-06T19:02:39.72+00:00

Hi @Greg Ernest - Admin ,

please take look here for various troubleshooting options:

Troubleshoot Azure Files connectivity and access issues (SMB)

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

GregE97 0 Reputation points

2025-01-06T20:20:08.8866667+00:00

I should have included this above. The error I am getting from the PS script provided is \PathAsDiscussedAbove\share either does not exist, or it is not a folder.

I have reviewed those. Some appear to be related to a Windows VM. I am on a couple of physical workstations. Others indicate a key which is not the method I am attempting to use. Perhaps I have chosen the wrong one.

I am using Microsoft Entra Domain Services under Identity Based Access for the SMB File Share in question. My use case is for Entra-joined client computers to be able to use a letter-based mapped SMB share for a Group of users.

Have a picked the best one?

-Greg

GregE97 0 Reputation points

2025-01-06T21:15:09.0133333+00:00

Interestingly, if I remove "-Persist" from the provided PS script the error changes to "The specified network password is not correct".

I don't see how that should matter if the drive cannot be found in the other instance.

Andreas Baumgarten 115.9K Reputation points MVP

2025-01-06T21:39:26.18+00:00

Hi @Greg Ernest - Admin ,

what is the output of the following PowerShell command (please run the command in a PowerShell and modify the value -ComputerName to your environment)?

Test-NetConnection -ComputerName <storageaccountname>.file.core.windows.net -Port 445

Using this PS command it doesn't matter which kind of authentication (AAD or Key) you are using for Azure File Share. It's just testing if a network connection from your client to Azure File Share on port 445 is working.

Please post the result.

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

GregE97 0 Reputation points

2025-01-06T21:42:12.1233333+00:00

ComputerName : mystorage.file.core.windows.net

RemoteAddress : 20.209.xx.xx

RemotePort : 445

InterfaceAlias : Ethernet

SourceAddress : x.x.x.x

TcpTestSucceeded : True

GregE97 0 Reputation points

2025-01-07T19:41:59.5866667+00:00

The above has "xx" to protect our information. It succeeds as per every Microsoft article I can find.

I have also added -Credential to the PS script. It prompts for my Username and Password and it tells me that the password is incorrect. This happens even if I try to map the drive in File Explorer. It's the same password I use daily to login to my computer.

I'm not sure what it wants.

GregE97 0 Reputation points

2025-01-07T19:56:39.15+00:00

Andreas Baumgarten I should add that 2FA is not enabled on my account.

I would love to know how that would change all this down the road.

KarishmaTiwari-MSFT 20,312 Reputation points Microsoft Employee

2025-01-10T01:22:37.1033333+00:00

GregE97 • Checking in to see if you are still seeing the issue. If yes, please share the requested details via private message.

GregE97 0 Reputation points

2025-01-10T14:31:58.34+00:00

Andreas,

That is the path I am using.

Right now it's public. I'll build the VPN once I get this running.

My current problem is that the mapping attempt does not accept the passwords of the accounts I am attempting this with. They have SMB read-write access in Azure in the IAM for the Resource Group, Storage Account, and the File Share itself. Below is the error I receive.

New-PSDrive : The specified network password is not correct
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Problem mapping SMB drive shares in Azure for Entra-joined users

1 answer

Your answer