Skip to content

Files

Latest commit

b-hchenb-hchen
add screenshot Active Directory Users and Computers utility
Apr 21, 2022
c38d728 · Apr 21, 2022

History

History
106 lines (66 loc) · 7.52 KB

faq-smb.md

File metadata and controls

106 lines (66 loc) · 7.52 KB
title description ms.service ms.workload ms.topic author ms.author ms.date
SMB FAQs for Azure NetApp Files | Microsoft Docs
Answers frequently asked questions (FAQs) about the SMB protocol of Azure NetApp Files.
azure-netapp-files
storage
conceptual
b-hchen
anfdocs
04/21/2022

SMB FAQs for Azure NetApp Files

This article answers frequently asked questions (FAQs) about the SMB protocol of Azure NetApp Files.

Which SMB versions are supported by Azure NetApp Files?

Azure NetApp Files supports SMB 2.1 and SMB 3.1 (which includes support for SMB 3.0).

Is an Active Directory connection required for SMB access?

Yes, you must create an Active Directory connection before deploying an SMB volume. The specified Domain Controllers must be accessible by the delegated subnet of Azure NetApp Files for a successful connection. See Create an SMB volume for details.

How many Active Directory connections are supported?

You can configure only one Active Directory (AD) connection per subscription and per region. See Requirements for Active Directory connections for additional information.

However, you can map multiple NetApp accounts that are under the same subscription and same region to a common AD server created in one of the NetApp accounts. See Map multiple NetApp accounts in the same subscription and region to an AD connection.

Does Azure NetApp Files support Azure Active Directory?

Both Azure Active Directory (AD) Domain Services and Active Directory Domain Services (AD DS) are supported. You can use existing Active Directory domain controllers with Azure NetApp Files. Domain controllers can reside in Azure as virtual machines, or on premises via ExpressRoute or S2S VPN. Azure NetApp Files doesn't support AD join for Azure Active Directory at this time.

If you are using Azure NetApp Files with Azure Active Directory Domain Services, the organizational unit path is OU=AADDC Computers when you configure Active Directory for your NetApp account.

What versions of Windows Server Active Directory are supported?

Azure NetApp Files supports Windows Server 2008r2SP1-2019 versions of Active Directory Domain Services.

I’m having issues connecting to my SMB share. What should I do?

As a best practice, set the maximum tolerance for computer clock synchronization to five minutes. For more information, see Maximum tolerance for computer clock synchronization.

Can I manage SMB Shares, Sessions, and Open Files through Microsoft Management Console (MMC)?

Azure NetApp Files supports modifying SMB Shares by using MMC. However, modifying share properties has significant risk. If the users or groups assigned to the share properties are removed from the Active Directory, or if the permissions for the share become unusable, then the entire share will become inaccessible.

Azure NetApp Files doesn't support using MMC to manage Sessions and Open Files.

How can I obtain the IP address of an SMB volume via the portal?

Use the JSON View link on the volume overview pane, and look for the startIp identifier under properties -> mountTargets.

Can an Azure NetApp Files SMB share act as a DFS Namespace (DFS-N) root?

No. However, Azure NetApp Files SMB shares can serve as a DFS Namespace (DFS-N) folder target.
To use an Azure NetApp Files SMB share as a DFS-N folder target, provide the Universal Naming Convention (UNC) mount path of the Azure NetApp Files SMB share by using the DFS Add Folder Target procedure.

Can the SMB share permissions be changed?

Azure NetApp Files supports modifying SMB Shares by using Microsoft Management Console (MMC). However, modifying share properties has significant risk. If the users or groups assigned to the share properties are removed from the Active Directory, or if the permissions for the share become unusable, then the entire share will become inaccessible.

You can change the NTFS permissions of the root volume by using NTFS file and folder permissions procedure.

Can I change the SMB share name after the SMB volume has been created?

No. However, you can create a new SMB volume with the new share name from a snapshot of the SMB volume with the old share name.

Alternatively, you can use Windows Server DFS Namespace where a DFS Namespace with the new share name can point to the Azure NetApp Files SMB volume with the old share name.

Does Azure NetApp Files support SMB change notification and file locking?

Yes.

Azure NetApp Files supports CHANGE_NOTIFY response. This response is for the client’s request that comes in the form of a CHANGE_NOTIFY request.

Azure NetApp Files also supports LOCK response. This response is for the client’s request that comes in the form of a LOCK request.

What is the password rotation policy for the Active Directory machine account for SMB volumes?

The Azure NetApp Files service has a policy that automatically updates the password on the Active Directory machine account that is created for SMB volumes. This policy has the following properties:

  • Schedule interval: 4 weeks
  • Schedule randomization period: 120 minutes
  • Schedule: Sunday @0100

To see when the password was last updated on the Azure NetApp Files SMB machine account, check the pwdLastSet property on the computer account using the Attribute Editor in the Active Directory Users and Computers utility:

Screenshot that shows the Active Directory Users and Computers utility

Note

Due to an interoperability issue with the April 2022 Monthly Windows Update, the policy that automatically updates the Active Directory machine account password for SMB volumes has been suspended until a fix is deployed.

Next steps