On-premises Active Directory Domain Services (AD DS) For more information, see Azure Active Directory Domain Services. These services are fully compatible with Active Directory Domain Services.
Azure AD combines core directory services, application access management, and identity protection into a single solution.Īzure Active Directory Domain Services (Azure AD DS)Īzure AD DS provides managed domain services such as domain join, group policies, LDAP, and Kerberos/NTLM authentication. For more information on SMB, see Microsoft SMB Protocol and CIFS Protocol Overview.Īzure AD is Microsoft's multi-tenant cloud-based directory and identity management service.
SMB is an industry-standard network file-sharing protocol. For more information on Kerberos, see Kerberos Authentication Overview. Kerberos is an authentication protocol that's used to verify the identity of a user or host. It's helpful to understand some key terms relating to identity-based authentication for Azure file shares: Premium file shares (FileStorage), LRS/ZRS Enabling identity-based access for your Azure file shares allows you to replace existing file servers with Azure file shares without replacing your existing directory service, maintaining seamless user access to shares. This article explains how Azure file shares can use domain services, either on-premises or in Azure, to support identity-based access to Azure file shares over SMB. Overview of Azure Files identity-based authentication options for SMB access
0 kommentar(er)
