Implement An Azure Files SMB Access On-Premises With Private Endpoints

Introduction

Azure files share SMB Access with on-premises Windows AD authentication allows you to access file shares in Azure with NTFS access control. By default, that access won’t extend to an on-prem network over VPN or Express Route. In this article, I teach how to extend access to Azure Files share with Windows AD to an on-premises network using Private Endpoints.

Prerequisites

• Active Directory Domain Services in On-prem
• On-prem to Azure connectivity via VPN S2S
• Azure storage account
• Azure Private Endpoint

Step 1

This is my domain controller from On-prem

Step 2

Click here Create An Storage Account In Azure (c-sharpcorner.com) to create the storage account

Step 3

In your storage account create on a file share and make it SMB elevated contributor

Implement a Private Endpoint for the azure storage account

Step 1

Select storage your account and create Private Endpoint Networking>Private endpoint connection

Step 2

Following the appropriate steps.

Step 3

In the resource tab Select file and Next.

Step 4

Following the steps for the demo purpose, I have kept the private IP dynamic. If you want you can change it.

Step 5

I'm going to use the default DNS name for the demo purpose.

Step 6

Just review + create

Step 7