Question

Your company is deploying Azure Virtual Desktop with FSLogix profile containers stored on an Azure Files share in a storage account joined to Active Directory Domain Services (AD DS). Users report that their profiles fail to load, and the FSLogix logs show access-denied errors when the containers are being created. You confirm the storage account is domain-joined and the file share exists. Which action should you take to resolve the issue?

Accepted Answer

Assign the AVD users the Storage File Data SMB Share Contributor Azure RBAC role on the storage account, and configure the correct NTFS (file-level) permissions on the file share.

Answer

Assign the AVD users the Storage Blob Data Contributor Azure RBAC role on the storage account.

Answer

Enable the Microsoft Entra Kerberos authentication feature and remove the AD DS join from the storage account.

Answer

Grant the AVD users the Owner role on the storage account subscription so they can create their containers.