Map Azure File Service Share with GPO / Login scriptWhy clustered windows service doesn't authenticate to...
Inventor that creates machine that grabs man from future
Can a person refuse a presidential pardon?
Can a hotel cancel a confirmed reservation?
What to do when being responsible for data protection in your lab, yet advice is ignored?
Eww, those bytes are gross
Where was Karl Mordo in Infinity War?
Why is c4 a better move in this position?
What's the rationale behind the objections to these measures against human trafficking?
Sometimes a banana is just a banana
What is Crew Dragon approaching in this picture?
Meth dealer reference in Family Guy
Why zero tolerance on nudity in space?
Is the theory of the category of topological spaces computable?
80’s/90’s fantasy book where men travelled across the land and inhabited creatures such as deer, beavers and pixies
Is Draco canonically good-looking?
Removing debris from PCB
What's a good word to describe a public place that looks like it wouldn't be rough?
Does "sickness" has the same meaning as "vomitus"?
Charged enclosed by the sphere
The change directory (cd) command is not working with a USB drive
What is the purpose of easy combat scenarios that don't need resource expenditure?
What are these green text/line displays shown during the livestream of Crew Dragon's approach to dock with the ISS?
If I delete my router's history can my ISP still provide it to my parents?
Auto Insert date into Notepad
Map Azure File Service Share with GPO / Login script
Why clustered windows service doesn't authenticate to share with machine name when share is resident on same node of clusterGPP drive map to nested share maps to root share on Windows 8.1Network drive map through GPO not working on Windows 2012 (Neither via logon script nor drive maps)Why do “net use” and windows “map network drive” share have a drastic speed difference?User cannot map share from system in another AD DomainMap a shared drive through GPO/GPP on a Windows 10 machine that is not part of an active directory domainWhat is needed to allow searching of file contents on remote 2012 R2 shareAuto Mapping Network DrivesPoor performance when mounting Azure File Share on Linux VMAuto login Azure VM
I created a Azure File Service shared folder. It comes with a net use script to map the drive. I would like to deploy a logon script that maps the drive automatically. When I try to deploy a User logon script over through a GPO the drive is not mapped. When I do a startup script on the Computer GPO it maps the drive, but it has a big red X on the drive. The O/S is Windows 2012 R2. Is there a best practice to map an Azure File Service Share some one could share? It should be mapped on around 100 servers, so manually doing it is not an option.
Regards,
Shawn Hodgson
windows windows-server-2012-r2 azure network-share
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
add a comment |
I created a Azure File Service shared folder. It comes with a net use script to map the drive. I would like to deploy a logon script that maps the drive automatically. When I try to deploy a User logon script over through a GPO the drive is not mapped. When I do a startup script on the Computer GPO it maps the drive, but it has a big red X on the drive. The O/S is Windows 2012 R2. Is there a best practice to map an Azure File Service Share some one could share? It should be mapped on around 100 servers, so manually doing it is not an option.
Regards,
Shawn Hodgson
windows windows-server-2012-r2 azure network-share
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
Have you tried to mount the Azure File Share as is described in this Microsoft article docs.microsoft.com/en-us/azure/storage/files/… ? You can create PowerShell script and create basic Scheduled task or share it via GPO
– Strepsils
Feb 5 '18 at 17:18
Are you able to share your script - minus any credentials, obviously.
– AndyHerb
Mar 28 '18 at 18:30
add a comment |
I created a Azure File Service shared folder. It comes with a net use script to map the drive. I would like to deploy a logon script that maps the drive automatically. When I try to deploy a User logon script over through a GPO the drive is not mapped. When I do a startup script on the Computer GPO it maps the drive, but it has a big red X on the drive. The O/S is Windows 2012 R2. Is there a best practice to map an Azure File Service Share some one could share? It should be mapped on around 100 servers, so manually doing it is not an option.
Regards,
Shawn Hodgson
windows windows-server-2012-r2 azure network-share
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
I created a Azure File Service shared folder. It comes with a net use script to map the drive. I would like to deploy a logon script that maps the drive automatically. When I try to deploy a User logon script over through a GPO the drive is not mapped. When I do a startup script on the Computer GPO it maps the drive, but it has a big red X on the drive. The O/S is Windows 2012 R2. Is there a best practice to map an Azure File Service Share some one could share? It should be mapped on around 100 servers, so manually doing it is not an option.
Regards,
Shawn Hodgson
windows windows-server-2012-r2 azure network-share
windows windows-server-2012-r2 azure network-share
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
asked Feb 5 '18 at 16:48
Shawn HodgsonShawn Hodgson
12
12
Have you tried to mount the Azure File Share as is described in this Microsoft article docs.microsoft.com/en-us/azure/storage/files/… ? You can create PowerShell script and create basic Scheduled task or share it via GPO
– Strepsils
Feb 5 '18 at 17:18
Are you able to share your script - minus any credentials, obviously.
– AndyHerb
Mar 28 '18 at 18:30
add a comment |
Have you tried to mount the Azure File Share as is described in this Microsoft article docs.microsoft.com/en-us/azure/storage/files/… ? You can create PowerShell script and create basic Scheduled task or share it via GPO
– Strepsils
Feb 5 '18 at 17:18
Are you able to share your script - minus any credentials, obviously.
– AndyHerb
Mar 28 '18 at 18:30
Have you tried to mount the Azure File Share as is described in this Microsoft article docs.microsoft.com/en-us/azure/storage/files/… ? You can create PowerShell script and create basic Scheduled task or share it via GPO
– Strepsils
Feb 5 '18 at 17:18
Have you tried to mount the Azure File Share as is described in this Microsoft article docs.microsoft.com/en-us/azure/storage/files/… ? You can create PowerShell script and create basic Scheduled task or share it via GPO
– Strepsils
Feb 5 '18 at 17:18
Are you able to share your script - minus any credentials, obviously.
– AndyHerb
Mar 28 '18 at 18:30
Are you able to share your script - minus any credentials, obviously.
– AndyHerb
Mar 28 '18 at 18:30
add a comment |
2 Answers
2
active
oldest
votes
You shouldn't use Azure File Shares for this. They are not a replacement for a traditional file server for a number of reasons, including the fact that it does not support ACLs natively. ACLs can be introduced via Azure File Sync, but that's a different solution that happens to use Azure File Shares on the back end.
If you put the storage account key (the password to the net use command) in a GPO or logon script, it will be readable by every user and computer with permission to process the GPO. That is really bad.
Azure File Shares are meant to host things like log files for shared web servers or shared IIS configuration data for applications that are being migrated to the cloud but still have these legacy dependencies. This is not a replacement for a traditional file server for user access.
Some alternatives might be Azure File Sync with IaaS and on-prem replicas, StorSimple appliances, or perhaps a third-party solution like Nasuni, Talon, Panzura, etc.
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
add a comment |
It’s not supported by Microsoft
Open a DOS window as administrator and execute the following:
psexec -i -s cmd.exe
Within that window execute the following to ensure it reports back you’re the system user
whoami
Now execute the following
cmdkey /add:ACCOUNTNAME.file.core.windows.net /user:ACCOUNTNAME /pass:MYKEY==
Next let’s create the file share
net use M: \ACCOUNTNAME.file.core.windows.netSHAREDFOLDER /u:ACCOUNTNAME
MYKEY== /persistent:yes
if you want to remove this file mount, you have to do it via PSEXEC
edited 10 hours ago
kasperd
26.5k1251103
answered 11 hours ago
httpdhttpd
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f895738%2fmap-azure-file-service-share-with-gpo-login-script%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
You shouldn't use Azure File Shares for this. They are not a replacement for a traditional file server for a number of reasons, including the fact that it does not support ACLs natively. ACLs can be introduced via Azure File Sync, but that's a different solution that happens to use Azure File Shares on the back end.
If you put the storage account key (the password to the net use command) in a GPO or logon script, it will be readable by every user and computer with permission to process the GPO. That is really bad.
Azure File Shares are meant to host things like log files for shared web servers or shared IIS configuration data for applications that are being migrated to the cloud but still have these legacy dependencies. This is not a replacement for a traditional file server for user access.
Some alternatives might be Azure File Sync with IaaS and on-prem replicas, StorSimple appliances, or perhaps a third-party solution like Nasuni, Talon, Panzura, etc.
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
add a comment |
You shouldn't use Azure File Shares for this. They are not a replacement for a traditional file server for a number of reasons, including the fact that it does not support ACLs natively. ACLs can be introduced via Azure File Sync, but that's a different solution that happens to use Azure File Shares on the back end.
If you put the storage account key (the password to the net use command) in a GPO or logon script, it will be readable by every user and computer with permission to process the GPO. That is really bad.
Azure File Shares are meant to host things like log files for shared web servers or shared IIS configuration data for applications that are being migrated to the cloud but still have these legacy dependencies. This is not a replacement for a traditional file server for user access.
Some alternatives might be Azure File Sync with IaaS and on-prem replicas, StorSimple appliances, or perhaps a third-party solution like Nasuni, Talon, Panzura, etc.
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
add a comment |
You shouldn't use Azure File Shares for this. They are not a replacement for a traditional file server for a number of reasons, including the fact that it does not support ACLs natively. ACLs can be introduced via Azure File Sync, but that's a different solution that happens to use Azure File Shares on the back end.
If you put the storage account key (the password to the net use command) in a GPO or logon script, it will be readable by every user and computer with permission to process the GPO. That is really bad.
Azure File Shares are meant to host things like log files for shared web servers or shared IIS configuration data for applications that are being migrated to the cloud but still have these legacy dependencies. This is not a replacement for a traditional file server for user access.
Some alternatives might be Azure File Sync with IaaS and on-prem replicas, StorSimple appliances, or perhaps a third-party solution like Nasuni, Talon, Panzura, etc.
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
You shouldn't use Azure File Shares for this. They are not a replacement for a traditional file server for a number of reasons, including the fact that it does not support ACLs natively. ACLs can be introduced via Azure File Sync, but that's a different solution that happens to use Azure File Shares on the back end.
If you put the storage account key (the password to the net use command) in a GPO or logon script, it will be readable by every user and computer with permission to process the GPO. That is really bad.
Azure File Shares are meant to host things like log files for shared web servers or shared IIS configuration data for applications that are being migrated to the cloud but still have these legacy dependencies. This is not a replacement for a traditional file server for user access.
Some alternatives might be Azure File Sync with IaaS and on-prem replicas, StorSimple appliances, or perhaps a third-party solution like Nasuni, Talon, Panzura, etc.
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
edited Feb 5 '18 at 20:18
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
answered Feb 5 '18 at 19:36
MDMarraMDMarra
92.8k27174314
92.8k27174314
add a comment |
add a comment |
It’s not supported by Microsoft
Open a DOS window as administrator and execute the following:
psexec -i -s cmd.exe
Within that window execute the following to ensure it reports back you’re the system user
whoami
Now execute the following
cmdkey /add:ACCOUNTNAME.file.core.windows.net /user:ACCOUNTNAME /pass:MYKEY==
Next let’s create the file share
net use M: \ACCOUNTNAME.file.core.windows.netSHAREDFOLDER /u:ACCOUNTNAME
MYKEY== /persistent:yes
if you want to remove this file mount, you have to do it via PSEXEC
edited 10 hours ago
kasperd
26.5k1251103
answered 11 hours ago
httpdhttpd
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
It’s not supported by Microsoft
Open a DOS window as administrator and execute the following:
psexec -i -s cmd.exe
Within that window execute the following to ensure it reports back you’re the system user
whoami
Now execute the following
cmdkey /add:ACCOUNTNAME.file.core.windows.net /user:ACCOUNTNAME /pass:MYKEY==
Next let’s create the file share
net use M: \ACCOUNTNAME.file.core.windows.netSHAREDFOLDER /u:ACCOUNTNAME
MYKEY== /persistent:yes
if you want to remove this file mount, you have to do it via PSEXEC
edited 10 hours ago
kasperd
26.5k1251103
answered 11 hours ago
httpdhttpd
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
It’s not supported by Microsoft
Open a DOS window as administrator and execute the following:
psexec -i -s cmd.exe
Within that window execute the following to ensure it reports back you’re the system user
whoami
Now execute the following
cmdkey /add:ACCOUNTNAME.file.core.windows.net /user:ACCOUNTNAME /pass:MYKEY==
Next let’s create the file share
net use M: \ACCOUNTNAME.file.core.windows.netSHAREDFOLDER /u:ACCOUNTNAME
MYKEY== /persistent:yes
if you want to remove this file mount, you have to do it via PSEXEC
edited 10 hours ago
kasperd
26.5k1251103
answered 11 hours ago
httpdhttpd
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
It’s not supported by Microsoft
Open a DOS window as administrator and execute the following:
psexec -i -s cmd.exe
Within that window execute the following to ensure it reports back you’re the system user
whoami
Now execute the following
cmdkey /add:ACCOUNTNAME.file.core.windows.net /user:ACCOUNTNAME /pass:MYKEY==
Next let’s create the file share
net use M: \ACCOUNTNAME.file.core.windows.netSHAREDFOLDER /u:ACCOUNTNAME
MYKEY== /persistent:yes
if you want to remove this file mount, you have to do it via PSEXEC
edited 10 hours ago
kasperd
26.5k1251103
answered 11 hours ago
httpdhttpd
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 10 hours ago
kasperd
26.5k1251103
edited 10 hours ago
kasperd
26.5k1251103
edited 10 hours ago
kasperd
26.5k1251103
26.5k1251103
answered 11 hours ago
httpdhttpd
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered 11 hours ago
httpdhttpd
12
answered 11 hours ago
httpdhttpd
12
12
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
httpd is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f895738%2fmap-azure-file-service-share-with-gpo-login-script%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Have you tried to mount the Azure File Share as is described in this Microsoft article docs.microsoft.com/en-us/azure/storage/files/… ? You can create PowerShell script and create basic Scheduled task or share it via GPO
– Strepsils
Feb 5 '18 at 17:18
Are you able to share your script - minus any credentials, obviously.
– AndyHerb
Mar 28 '18 at 18:30