Merge pull request #209922 from khdownie/kendownie090122

adding group policy

Author: prmerger-automator[bot]

articles/storage/files/storage-files-identity-auth-azure-active-directory-enable.md

@@ -4,7 +4,7 @@ description: Learn how to enable identity-based Kerberos authentication for hybr
 author: khdownie
 ms.service: storage
 ms.topic: how-to
-ms.date: 08/29/2022
+ms.date: 09/01/2022
 ms.author: kendownie
 ms.subservice: files
 ---
@@ -124,6 +124,12 @@ To configure directory and file level permissions through Windows File explorer,
 
 To configure directory and file-level permissions, follow the instructions in [Configure directory and file-level permissions over SMB](storage-files-identity-ad-ds-configure-permissions.md).
 
+## Configure the clients by setting group policy
+
+Enable the Azure AD Kerberos functionality on the client machine(s) you want to mount/use Azure File shares from by configuring this group policy on every client on which Azure Files will be used.
+
+`Administrative Templates\System\Kerberos\Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon`
+
 ## Disable Azure AD authentication on your storage account
 
 If you want to use another authentication method, you can disable Azure AD authentication on your storage account by using the Azure portal.