Skip to content

Commit 32467a4

Browse files
Merge pull request #291391 from b-ahibbard/ga-multi-ad
Multi-AD general availability (GA)
2 parents d27d1d1 + 9ef670c commit 32467a4

File tree

3 files changed

+25
-22
lines changed

3 files changed

+25
-22
lines changed

articles/azure-netapp-files/create-active-directory-connections.md

Lines changed: 16 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: b-hchen
66
ms.service: azure-netapp-files
77
ms.custom: devx-track-azurepowershell
88
ms.topic: how-to
9-
ms.date: 02/21/2025
9+
ms.date: 05/09/2025
1010
ms.author: anfdocs
1111
---
1212
# Create and manage Active Directory connections for Azure NetApp Files
@@ -22,11 +22,7 @@ Several features of Azure NetApp Files require that you have an Active Directory
2222
2323
* An Azure NetApp Files account must be created in the region where the Azure NetApp Files volumes are to be deployed.
2424

25-
* By default, Azure NetApp Files allows only one Active Directory (AD) connection per subscription.
26-
27-
You can [create one Active Directory connection per NetApp account](#multi-ad).
28-
29-
Before enrolling in this feature, check the [Active Directory type](#netapp-accounts-and-active-directory-type) field in your account page.
25+
* Azure NetApp Files, by default, allows one Active Directory (AD) connection per subscription and account. You can modify the default to [create one Active Directory connection per NetApp account](#multi-ad).
3026

3127
* The Azure NetApp Files AD connection admin account must have the following properties:
3228
* It must be an AD DS domain user account in the same domain where the Azure NetApp Files computer accounts are created.
@@ -94,7 +90,7 @@ For more information about the relationship between NetApp accounts and subscrip
9490
![Screenshot showing the Active Directory connections menu. The join button is highlighted.](./media/create-active-directory-connections/azure-netapp-files-active-directory-connections.png)
9591
9692
>[!NOTE]
97-
>Azure NetApp Files supports only one Active Directory connection within the same region and the same subscription.
93+
>By default, Azure NetApp Files supports only one Active Directory connection within the same region and the same subscription. You can modify this setting to [create one Active Directory connection per NetApp account](#multi-ad).
9894
9995
2. In the Join Active Directory window, provide the following information, based on the Domain Services you want to use:
10096
@@ -105,14 +101,14 @@ For more information about the relationship between NetApp accounts and subscrip
105101
This is the IP address of the secondary DNS server that is required for Active Directory domain join operations, SMB authentication, Kerberos, and LDAP operations.
106102
107103
>[!NOTE]
108-
>It is recommended that you configure a Secondary DNS server. See [Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files](understand-guidelines-active-directory-domain-service-site.md). Ensure that your DNS server configuration meets the requirements for Azure NetApp Files. Otherwise, Azure NetApp Files service operations, SMB authentication, Kerberos, or LDAP operations might fail.
104+
>It's recommended that you configure a Secondary DNS server. See [Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files](understand-guidelines-active-directory-domain-service-site.md). Ensure that your DNS server configuration meets the requirements for Azure NetApp Files. Otherwise, Azure NetApp Files service operations, SMB authentication, Kerberos, or LDAP operations might fail.
109105
110106
If you use Microsoft Entra Domain Services, use the IP addresses of the Microsoft Entra Domain Services domain controllers for Primary DNS and Secondary DNS respectively.
111107
112108
* **AD DNS Domain Name (required)**
113109
This is the fully qualified domain name of the AD DS used with Azure NetApp Files (for example, `contoso.com`).
114110
* **AD Site Name (required)**
115-
This is the AD DS site name that Azure NetApp Files USES for domain controller discovery.
111+
This is the AD DS site name that Azure NetApp Files uses for domain controller discovery.
116112
117113
The default site name for both AD DS and Microsoft Entra Domain Services is `Default-First-Site-Name`. Follow the [naming conventions for site names](/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou#site-names) if you want to rename the site name.
118114
@@ -281,23 +277,23 @@ For more information about the relationship between NetApp accounts and subscrip
281277
282278
![Screenshot of the Active Directory connections menu showing a successfully created connection.](./media/create-active-directory-connections/azure-netapp-files-active-directory-connections-created.png)
283279
284-
## <a name="multi-ad"></a> Create one Active Directory connection per NetApp account (preview)
280+
## <a name="multi-ad"></a> Create one Active Directory connection per NetApp account
285281
286-
With this feature, each NetApp account within an Azure subscription can have its own AD connection. Once configured, the AD connection of the NetApp account is used when you create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). That means, Azure NetApp Files supports more than one AD connection per Azure subscription when multiple NetApp accounts are used.
282+
The current default behavior of Azure NetApp Files supports one AD connection per subscription and region. By enabling this feature, you modify behavior so that each NetApp account within an Azure subscription can have its own AD connection. When this feature is enabled, _newly created_ NetApp accounts maintain their own AD connection.
287283
288-
>[!NOTE]
289-
>If a subscription has both this and the [Shared Active Directory](#shared_ad) feature enabled, its existing accounts still share the AD configuration. Any new NetApp accounts created on the subscription can use their own AD configurations. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
284+
Once configured, the AD connection of the NetApp account is used when you create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). That means Azure NetApp Files supports more than one AD connection per Azure subscription when multiple NetApp accounts are used.
290285
291-
### Considerations
286+
>[!NOTE]
287+
>If a subscription has both this feature and the [Shared Active Directory](#shared_ad) feature enabled, its existing accounts still share the AD configuration. Any new NetApp accounts created on the subscription can use their own AD configurations. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
292288
293-
* The scope of each AD configuration is limited to its parent NetApp account.
289+
>[!IMPORTANT]
290+
>The scope of each AD configuration is limited to its parent NetApp account.
294291
295292
### Register the feature
296293
297-
The feature to create one AD connection per NetApp account is currently in preview. You need to register the feature before using it for the first time. After registration, the feature is enabled and works in the background.
294+
The ability to create one AD connection per NetApp account is generally available. You need to register the feature before using it for the first time. After registration, the feature is enabled and works in the background.
298295
299296
1. Register the feature:
300-
301297
```azurepowershell-interactive
302298
Register-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFMultipleActiveDirectory
303299
```
@@ -310,13 +306,14 @@ The feature to create one AD connection per NetApp account is currently in previ
310306
```azurepowershell-interactive
311307
Get-AzProviderFeature -ProviderNamespace Microsoft.NetApp -FeatureName ANFMultipleActiveDirectory
312308
```
313-
You can also use [Azure CLI commands](/cli/azure/feature) `az feature register` and `az feature show` to register the feature and display the registration status.
309+
310+
You can also use [Azure CLI commands](/cli/azure/feature) `az feature register` and `az feature show` to register the feature and display the registration status.
314311
315312
## <a name="shared_ad"></a>Map multiple NetApp accounts in the same subscription and region to one AD connection (preview)
316313
317314
The Shared AD feature enables all NetApp accounts to share an AD connection created by one of the NetApp accounts that belong to the same subscription and the same region. For example, using this feature, all NetApp accounts in the same subscription and region can use the common AD configuration to create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). When you use this feature, the AD connection is visible in all NetApp accounts that are under the same subscription and same region.
318315
319-
With the introduction of the feature to [create an AD connection per NetApp account](#multi-ad), new feature registration for the Shared AD feature aren't accepted.
316+
With the introduction of the feature to [create one AD connection per NetApp account](#multi-ad), new feature registrations for the Shared AD feature aren't accepted.
320317
321318
>[!NOTE]
322319
>You can register to use one AD connection per NetApp account if you're already enrolled in the preview for Shared AD. If you currently meet the maximum of 10 NetApp accounts per Azure region per subscription, you must initiate a [support request](azure-netapp-files-resource-limits.md#request-limit-increase) to increase the limit. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.

articles/azure-netapp-files/regional-capacity-quota.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Regional capacity quota for Azure NetApp Files | Microsoft Docs
2+
title: Regional capacity quota for Azure NetApp Files
33
description: Explains regional capacity quota of Azure NetApp Files.
44
services: azure-netapp-files
55
author: b-hchen

articles/azure-netapp-files/whats-new.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
---
2-
title: What's new in Azure NetApp Files | Microsoft Docs
2+
title: What's new in Azure NetApp Files
33
description: Provides a summary about the latest new features and enhancements of Azure NetApp Files.
44
services: azure-netapp-files
55
author: b-hchen
66
ms.service: azure-netapp-files
77
ms.custom: linux-related-content
88
ms.topic: overview
9-
ms.date: 05/08/2025
9+
ms.date: 05/09/2025
1010
ms.author: anfdocs
1111
---
1212

@@ -16,6 +16,12 @@ Azure NetApp Files is updated regularly. This article provides a summary about t
1616

1717
## May 2025
1818

19+
* [Support for one Active Directory connection per NetApp account](create-active-directory-connections.md#multi-ad) is now generally available (GA)
20+
21+
The Azure NetApp Files support for Active Directory connection per NetApp account feature is now generally available. The feature allows each NetApp account to connect to its own Active Directory Forest and Domain, providing the ability to manage more than one Active Directory connections within a single region under a subscription. This enhancement enables distinct Active Directory connections for each NetApp account, facilitating operational isolation and specialized hosting scenarios. Active Directory connections can be configured multiple times for multiple NetApp accounts to make use of it. With the creation of SMB volumes in Azure NetApp Files now tied to these Active Directory connections in the NetApp account, the management of Active Directory environments becomes more scalable, streamlined, and efficient.
22+
23+
You're still required [to register for this feature](create-active-directory-connections.md#register-the-feature).
24+
1925
* [New quota metrics: subscription quota metrics](azure-netapp-files-metrics.md#subscription-quota-metrics) (preview)
2026

2127
[Subscription quota metrics](azure-netapp-files-metrics.md#subscription-quota-metrics) display subscription-level quotas relative to the imposed [resource limits](azure-netapp-files-resource-limits.md) within your subscription. These metrics are displayed in two columns: the current limit (Current) and the consumption by your subscription (Used). These metrics enable you to proactively monitor and increase these limits via support request when needed. The used column includes the following consumed metrics:

0 commit comments

Comments
 (0)