Azure File Shares provide cloud-based file storage that you can access like a network drive. You create a share inside an Azure storage account, which is the top-level container for your storage resources. When you create a share, you choose its size and performance tier, such as the Premium tier for high-speed workloads or the Standard tier for general use. Once created, you can access the share from anywhere using the Server Message Block (SMB) or Network File System (NFS) protocol, and you manage it through the Azure portal, PowerShell, or Azure CLI by performing tasks like resizing the share or changing its performance tier.
Controlling who can access an Azure File Share involves setting permissions at two main levels. First, you control network-level access by configuring the storage account firewall to allow traffic only from specific virtual networks or IP addresses. Second, you manage file-level permissions using Azure role-based access control (Azure RBAC) for administrative actions on the share and NTFS permissions for controlling access to files and folders within the share. NTFS permissions are applied directly on the files, just like on a traditional Windows Server, and they work together with the network rules; a user must pass both checks to successfully read or write data.
Azure File Sync is a service that keeps files synchronized between your on-premises Windows Servers and Azure File Shares. You deploy it by installing a sync agent on your Windows Server and then registering that server with a Sync Group in Azure. The Sync Group defines the connection between a specific cloud endpoint (your Azure File Share) and one or more server endpoints (folders on your local server). The service then continuously syncs files between these locations. A key feature is cloud tiering, which can move less-used files to the cloud, freeing up local disk space while keeping the files appear as if they are still locally stored.
A system architecture showing on-premises Windows Servers with the File Sync Agent registering with Azure Storage Sync Service, which creates Sync Groups linking cloud endpoints (Azure File Shares stored in a Storage Account) to server endpoints (local folders), with cloud tiering caching hot files locally, Azure Monitor tracking sync health, and Azure Backup protecting the share.
To ensure Azure File Sync is working correctly, you need to monitor its health and performance. You do this primarily through the Azure File Sync monitoring dashboard in the Azure portal, which shows the sync status for each server and any errors that have occurred. Important metrics to watch include the sync session results, which tell you if files are syncing successfully, and the cloud tiering efficiency, which shows how much local space you are saving. You can also set up alerts to notify you when a server goes offline or when sync health degrades, allowing you to troubleshoot issues before users are affected.
You can migrate files from an on-premises Distributed File System (DFS) namespace to use Azure File Sync. The migration process involves several steps to ensure a smooth transition. First, you install the Azure File Sync agent on your DFS namespace servers. Then, you create a Sync Group and add the existing DFS folder as a server endpoint. Azure File Sync will begin replicating the files to the Azure File Share. Once synchronization is complete and validated, you can update your users or applications to point to the new Azure File Share location, effectively moving the file service to the cloud while maintaining the familiar folder structure and access controls.
Eager to master hybrid server management? Discover how to administer Windows Server Hybrid Core Infrastructure on Azure, setting your path towards the Microsoft Certified: Azure Hybrid Infrastructure Administrator Associate certification!
Prepare and test your skills
Prepare and test your skills
Permissions for an Azure File Share are managed at the network level and the file level. Network-level access is controlled by configuring the storage account firewall to allow traffic from specific virtual networks or IP addresses. File-level permissions are managed using Azure role-based access control (Azure RBAC) for administrative actions and NTFS permissions for controlling access to files and folders within the share.
Azure File Sync is a service that keeps files synchronized between on-premises Windows Servers and Azure File Shares. A key feature of Azure File Sync is cloud tiering, which can move less-used files to the cloud to free up local disk space while keeping the files appear as if they are still locally stored.
You monitor Azure File Sync primarily through the Azure File Sync monitoring dashboard in the Azure portal. This dashboard shows sync status for each server and any errors, including important metrics like sync session results and cloud tiering efficiency. You can also set up alerts to notify you when a server goes offline or when sync health degrades.
StudyCerts
StudyCerts