You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/sap/workloads/high-availability-guide-windows-azure-files-smb.md
+7-8Lines changed: 7 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -89,14 +89,14 @@ Prerequisites for the installation of SAP NetWeaver High Availability Systems on
89
89
1. Download the [Azure Files GitHub](../../storage/files/storage-files-identity-ad-ds-enable.md#download-azfileshybrid-module) content and execute the [script](../../storage/files/storage-files-identity-ad-ds-enable.md#run-join-azstorageaccount).
90
90
This script creates either a Computer Account or Service Account in Active Directory. The user running the script must have the following properties:
91
91
* The user running the script must have permission to create objects in the Active Directory Domain containing the SAP servers. Typically, a domain administrator account is used such as **[email protected]**
92
-
* Before executing the script confirm that this Active Directory Domain user account is synchronized with Azure Active Directory (AAD). An example of this would be to open the Azure portal and navigate to AAD users and check that the user **[email protected]** exists and verify the AAD user account **[email protected]**.
92
+
* Before executing the script confirm that this Active Directory Domain user account is synchronized with Azure Active Directory (Azure AD). An example of this would be to open the Azure portal and navigate to Azure AD users and check that the user **[email protected]** exists and verify the Azure AD user account **[email protected]**.
93
93
* Grant the **Contributor RBAC** role to this Azure Active Directory user account for the Resource Group containing the storage account holding the File Share. In this example, the user **[email protected]** is granted **Contributor Role** to the respective Resource Group
94
94
* The script should be executed while logged on to a Windows server using an Active Directory Domain user account with the permission as specified above, in this example the account **[email protected]** would be used.
95
95
>[!IMPORTANT]
96
96
> When executing the PowerShell script command **Connect-AzAccount**, it is highly recommended to enter the Azure Active Directory user account that corresponds and maps to the Active Directory Domain user account used to logon to a Windows Server, in this example this is the user account **[email protected]**
97
97
>
98
98
In this example scenario, the Active Directory Administrator would logon to the Windows Server as **[email protected]** and when using the **PS command Connect-AzAccount** connect as user **[email protected]**. Ideally the Active Directory Administrator and the Azure Administrator should work together on this task.
99
-
Screenshot of the PowerShell script creating local AD account.
99
+

100
100
101
101
Azure portal screenshot after successful PowerShell script execution.
102
102
@@ -108,7 +108,6 @@ Prerequisites for the installation of SAP NetWeaver High Availability Systems on
108
108
> [!IMPORTANT]
109
109
> This step must be completed before the SAPInst installation or it will be difficult or impossible to change ACLs after SAPInst has created directories and files on the File Share
110
110
>
111
-
Windows Explorer screenshot of the assigned user rights.
112
111
113
112
The following screenshots show how to add Computer machine accounts by selecting the Object Types -> Computers
114
113
Windows Server screenshot of adding the cluster name to the local AD.
@@ -118,7 +117,7 @@ Prerequisites for the installation of SAP NetWeaver High Availability Systems on
118
117
Screenshot of adding AD computer account - Step 3
119
118
Screenshot of computer account access properties.
120
119
121
-
8.Ifnecessary move the Computer Account created for Azure Files to an Active Directory Container that doesn't have account expiry. The name of the Computer Account will be the short name of the storage account
120
+
8.If necessary move the Computer Account created for Azure Files to an Active Directory Container that doesn't have account expiry. The name of the Computer Account will be the short name of the storage account
122
121
123
122
124
123
> [!IMPORTANT]
@@ -145,9 +144,9 @@ The PowerShell scripts downloaded in step 3.c contain a debug script to conduct
PowerShell screenshot of the debug script output.
147
+
PowerShell screenshot of the debug script output.
149
148
150
-
The following screen shows the technical information to validate a successful domain join.
149
+
The following screen shows the technical information to validate a successful domain join.
151
150
## Useful links & resources
152
151
153
152
* SAP Note [2273806][2273806] SAP support for storage or file system related solutions
@@ -175,7 +174,7 @@ While the resource consumption of the SAP ASCS/SCS is fairly small, a reduction
175
174
176
175
### <aname="5121771a-7618-4f36-ae14-ccf9ee5f2031"></a>SAP Application Servers on WSFC nodes using Azure Files SMB
177
176
178
-
SAP application Servers locally installed.
177
+
SAP application Servers locally installed.
179
178
180
179
> [!NOTE]
181
180
> The picture shows the use of additional local disks. This is optional for customers who will not install application software on the OS drive (C:\)
@@ -187,7 +186,7 @@ While the resource consumption of the SAP ASCS/SCS is fairly small, a reduction
187
186
> Using Azure Files SMB for any SQL Server volume is not supported.
188
187
>
189
188
190
-
SAP ASCS/SCS on SQL Server Always On nodes using Azure Files SMB
189
+
SAP ASCS/SCS on SQL Server Always On nodes using Azure Files SMB
191
190
192
191
> [!NOTE]
193
192
> The picture shows the use of additional local disks. This is optional for customers who will not install application software on the OS drive (C:\)
0 commit comments