You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/create-active-directory-connections.md
+16-19Lines changed: 16 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: b-hchen
6
6
ms.service: azure-netapp-files
7
7
ms.custom: devx-track-azurepowershell
8
8
ms.topic: how-to
9
-
ms.date: 02/21/2025
9
+
ms.date: 05/09/2025
10
10
ms.author: anfdocs
11
11
---
12
12
# Create and manage Active Directory connections for Azure NetApp Files
@@ -22,11 +22,7 @@ Several features of Azure NetApp Files require that you have an Active Directory
22
22
23
23
* An Azure NetApp Files account must be created in the region where the Azure NetApp Files volumes are to be deployed.
24
24
25
-
* By default, Azure NetApp Files allows only one Active Directory (AD) connection per subscription.
26
-
27
-
You can [create one Active Directory connection per NetApp account](#multi-ad).
28
-
29
-
Before enrolling in this feature, check the [Active Directory type](#netapp-accounts-and-active-directory-type) field in your account page.
25
+
* Azure NetApp Files, by default, allows one Active Directory (AD) connection per subscription and account. You can modify the default to [create one Active Directory connection per NetApp account](#multi-ad).
30
26
31
27
* The Azure NetApp Files AD connection admin account must have the following properties:
32
28
* It must be an AD DS domain user account in the same domain where the Azure NetApp Files computer accounts are created.
@@ -94,7 +90,7 @@ For more information about the relationship between NetApp accounts and subscrip
94
90

95
91
96
92
>[!NOTE]
97
-
>Azure NetApp Files supports only one Active Directory connection within the same region and the same subscription.
93
+
>By default, Azure NetApp Files supports only one Active Directory connection within the same region and the same subscription. You can modify this setting to [create one Active Directory connection per NetApp account](#multi-ad).
98
94
99
95
2. In the Join Active Directory window, provide the following information, based on the Domain Services you want to use:
100
96
@@ -105,14 +101,14 @@ For more information about the relationship between NetApp accounts and subscrip
105
101
This is the IP address of the secondary DNS server that is required for Active Directory domain join operations, SMB authentication, Kerberos, and LDAP operations.
106
102
107
103
>[!NOTE]
108
-
>It is recommended that you configure a Secondary DNS server. See [Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files](understand-guidelines-active-directory-domain-service-site.md). Ensure that your DNS server configuration meets the requirements for Azure NetApp Files. Otherwise, Azure NetApp Files service operations, SMB authentication, Kerberos, or LDAP operations might fail.
104
+
>It's recommended that you configure a Secondary DNS server. See [Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files](understand-guidelines-active-directory-domain-service-site.md). Ensure that your DNS server configuration meets the requirements for Azure NetApp Files. Otherwise, Azure NetApp Files service operations, SMB authentication, Kerberos, or LDAP operations might fail.
109
105
110
106
If you use Microsoft Entra Domain Services, use the IP addresses of the Microsoft Entra Domain Services domain controllers for Primary DNS and Secondary DNS respectively.
111
107
112
108
* **AD DNS Domain Name (required)**
113
109
This is the fully qualified domain name of the AD DS used with Azure NetApp Files (for example, `contoso.com`).
114
110
* **AD Site Name (required)**
115
-
This is the AD DS site name that Azure NetApp Files USES for domain controller discovery.
111
+
This is the AD DS site name that Azure NetApp Files uses for domain controller discovery.
116
112
117
113
The default site name for both AD DS and Microsoft Entra Domain Services is `Default-First-Site-Name`. Follow the [naming conventions for site names](/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou#site-names) if you want to rename the site name.
118
114
@@ -281,23 +277,23 @@ For more information about the relationship between NetApp accounts and subscrip
281
277
282
278

283
279
284
-
## <a name="multi-ad"></a> Create one Active Directory connection per NetApp account (preview)
280
+
## <a name="multi-ad"></a> Create one Active Directory connection per NetApp account
285
281
286
-
With this feature, each NetApp account within an Azure subscription can have its own AD connection. Once configured, the AD connection of the NetApp account is used when you create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). That means, Azure NetApp Files supports more than one AD connection per Azure subscription when multiple NetApp accounts are used.
282
+
The current default behavior of Azure NetApp Files supports one AD connection per subscription and region. By enabling this feature, you modify behavior so that each NetApp account within an Azure subscription can have its own AD connection. When this feature is enabled, _newly created_ NetApp accounts maintain their own AD connection.
287
283
288
-
>[!NOTE]
289
-
>If a subscription has both this and the [Shared Active Directory](#shared_ad) feature enabled, its existing accounts still share the AD configuration. Any new NetApp accounts created on the subscription can use their own AD configurations. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
284
+
Once configured, the AD connection of the NetApp account is used when you create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). That means Azure NetApp Files supports more than one AD connection per Azure subscription when multiple NetApp accounts are used.
290
285
291
-
### Considerations
286
+
>[!NOTE]
287
+
>If a subscription has both this feature and the [Shared Active Directory](#shared_ad) feature enabled, its existing accounts still share the AD configuration. Any new NetApp accounts created on the subscription can use their own AD configurations. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
292
288
293
-
* The scope of each AD configuration is limited to its parent NetApp account.
289
+
>[!IMPORTANT]
290
+
>The scope of each AD configuration is limited to its parent NetApp account.
294
291
295
292
### Register the feature
296
293
297
-
The feature to create one AD connection per NetApp account is currently in preview. You need to register the feature before using it for the first time. After registration, the feature is enabled and works in the background.
294
+
The ability to create one AD connection per NetApp account is generally available. You need to register the feature before using it for the first time. After registration, the feature is enabled and works in the background.
You can also use [Azure CLI commands](/cli/azure/feature) `az feature register` and `az feature show` to register the feature and display the registration status.
309
+
310
+
You can also use [Azure CLI commands](/cli/azure/feature) `az feature register` and `az feature show` to register the feature and display the registration status.
314
311
315
312
## <a name="shared_ad"></a>Map multiple NetApp accounts in the same subscription and region to one AD connection (preview)
316
313
317
314
The Shared AD feature enables all NetApp accounts to share an AD connection created by one of the NetApp accounts that belong to the same subscription and the same region. For example, using this feature, all NetApp accounts in the same subscription and region can use the common AD configuration to create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). When you use this feature, the AD connection is visible in all NetApp accounts that are under the same subscription and same region.
318
315
319
-
With the introduction of the feature to [create an AD connection per NetApp account](#multi-ad), new feature registration for the Shared AD feature aren't accepted.
316
+
With the introduction of the feature to [create one AD connection per NetApp account](#multi-ad), new feature registrations for the Shared AD feature aren't accepted.
320
317
321
318
>[!NOTE]
322
319
>You can register to use one AD connection per NetApp account if you're already enrolled in the preview for Shared AD. If you currently meet the maximum of 10 NetApp accounts per Azure region per subscription, you must initiate a [support request](azure-netapp-files-resource-limits.md#request-limit-increase) to increase the limit. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/whats-new.md
+8-2Lines changed: 8 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,12 @@
1
1
---
2
-
title: What's new in Azure NetApp Files | Microsoft Docs
2
+
title: What's new in Azure NetApp Files
3
3
description: Provides a summary about the latest new features and enhancements of Azure NetApp Files.
4
4
services: azure-netapp-files
5
5
author: b-hchen
6
6
ms.service: azure-netapp-files
7
7
ms.custom: linux-related-content
8
8
ms.topic: overview
9
-
ms.date: 05/08/2025
9
+
ms.date: 05/09/2025
10
10
ms.author: anfdocs
11
11
---
12
12
@@ -16,6 +16,12 @@ Azure NetApp Files is updated regularly. This article provides a summary about t
16
16
17
17
## May 2025
18
18
19
+
*[Support for one Active Directory connection per NetApp account](create-active-directory-connections.md#multi-ad) is now generally available (GA)
20
+
21
+
The Azure NetApp Files support for Active Directory connection per NetApp account feature is now generally available. The feature allows each NetApp account to connect to its own Active Directory Forest and Domain, providing the ability to manage more than one Active Directory connections within a single region under a subscription. This enhancement enables distinct Active Directory connections for each NetApp account, facilitating operational isolation and specialized hosting scenarios. Active Directory connections can be configured multiple times for multiple NetApp accounts to make use of it. With the creation of SMB volumes in Azure NetApp Files now tied to these Active Directory connections in the NetApp account, the management of Active Directory environments becomes more scalable, streamlined, and efficient.
22
+
23
+
You're still required [to register for this feature](create-active-directory-connections.md#register-the-feature).
[Subscription quota metrics](azure-netapp-files-metrics.md#subscription-quota-metrics) display subscription-level quotas relative to the imposed [resource limits](azure-netapp-files-resource-limits.md) within your subscription. These metrics are displayed in two columns: the current limit (Current) and the consumption by your subscription (Used). These metrics enable you to proactively monitor and increase these limits via support request when needed. The used column includes the following consumed metrics:
0 commit comments