The planned change is to enable Microsoft Entra Kerberos authentication for all supported storage . Microsoft Entra Kerberos authentication is supported for Azure Files SMB shares , so only storage account types that support Azure Files qualify. Microsoft documents Microsoft Entra Kerberos as an identity-based authentication method specifically for Azure file shares over SMB.
From the case:
storage1 — Standard, general-purpose storage: supported. Standard general-purpose v2 accounts support Azure Files in addition to blobs, queues, and tables.
storage2 — Premium Block blobs: not supported because this account type supports Blob Storage, not Azure Files.
storage3 — Premium File shares: supported because this account type is specifically designed for Azure Files.
storage4 — Premium Page blobs: not supported because this account type supports page blobs only.
Therefore, Microsoft Entra Kerberos can be enabled for storage1 and storage3 only .
The account ' s Azure region does not change this determination. The decisive factor is whether the storage account supports Azure Files SMB , because Microsoft Entra Kerberos authentication is configured through the Azure Files identity-based access settings.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit