Merge pull request #261823 from khdownie/kendownie122123

add note about SID to UPN translation

Author: prmerger-automator[bot]

articles/storage/files/storage-files-identity-ad-ds-mount-file-share.md

@@ -4,7 +4,7 @@ description: Learn how to mount an SMB Azure file share using your on-premises A
 author: khdownie
 ms.service: azure-file-storage
 ms.topic: how-to
-ms.date: 11/28/2023
+ms.date: 12/21/2023
 ms.author: kendownie
 ms.custom: engagement-fy23
 recommendations: false
@@ -19,6 +19,7 @@ The process described in this article verifies that your SMB file share and acce
 Sign in to the client using the credentials of the identity that you granted permissions to.
 
 ## Applies to
+
 | File share type | SMB | NFS |
 |-|:-:|:-:|
 | Standard file shares (GPv2), LRS/ZRS | ![Yes](../media/icons/yes-icon.png) | ![No](../media/icons/no-icon.png) |
@@ -68,6 +69,9 @@ For example:
 net use Z: \\<YourStorageAccountName>.file.core.windows.net\<FileShareName> /user:<username@domainFQDN>
 ```
 
+> [!NOTE]
+> Azure Files doesn't support SID to UPN translation for users and groups from a non-domain joined VM or a VM joined to a different domain via Windows File Explorer. If you want to view file/directory owners or view/modify NTFS permissions via Windows File Explorer, you can do so only from domain joined VMs.
+
 ## Mount file shares using custom domain names
 
 If you don't want to mount Azure file shares using the suffix `file.core.windows.net`, you can modify the suffix of the storage account name associated with the Azure file share, and then add a canonical name (CNAME) record to route the new suffix to the endpoint of the storage account. The following instructions are for single-forest environments only. To learn how to configure environments that have two or more forests, see [Use Azure Files with multiple Active Directory forests](storage-files-identity-multiple-forests.md).