Question

Your company stores departmental documents on an Azure file share and mounts it on domain-joined Windows 10 devices. You must allow users to access the share using their existing on-premises Active Directory credentials, and you want to enforce granular NTFS permissions on files and folders. The organization uses an on-premises Active Directory Domain Services (AD DS) environment synchronized to Microsoft Entra ID. What should you configure to meet these requirements?

Accepted Answer

Enable identity-based access for the file share using on-premises Active Directory Domain Services (AD DS) authentication, then assign share-level RBAC roles and set NTFS permissions.

Answer

Generate a shared access signature (SAS) token for the file share and distribute it to each user.

Answer

Configure the storage account access keys and share them with the department members.

Answer

Enable identity-based access using Microsoft Entra Domain Services and mount the share with the storage account key.