Merge pull request #301896 from khdownie/patch-5

Update storage-files-identity-ad-ds-update-password.md

Author: prmerger-automator[bot]

articles/storage/files/storage-files-identity-ad-ds-update-password.md

@@ -1,16 +1,16 @@
 ---
-title: Update password for an AD DS storage account identity
+title: Update Password for an AD DS Storage Account Identity
 description: Learn how to update the password of the Active Directory Domain Services (AD DS) identity that represents your storage account.
 author: khdownie
 ms.service: azure-file-storage
 ms.topic: how-to
 ms.date: 11/08/2024
 ms.author: kendownie
-recommendations: false
-# Customer intent: As a storage account administrator, I want to update the Active Directory Domain Services identity password for my storage account, so that I can maintain Kerberos authentication and ensure uninterrupted access to Azure file shares.
+# Customer intent: As a storage administrator, I want to update the password of the Active Directory Domain Services identity that represents my storage account, so that I can maintain Kerberos authentication and ensure uninterrupted access to Azure file shares.
 ---
 
 # Update the password of your storage account identity in AD DS
+
 When you domain join your storage account in your Active Directory Domain Services (AD DS), you create an AD principal, either a computer account or service account, with a password. The password of the AD principal is one of the Kerberos keys of the storage account. Depending on the password policy of the organization unit of the AD principal, you must periodically rotate the password of the AD principal to avoid authentication issues. Failing to change the password before it expires could result in losing Kerberos authentication to your Azure file shares. Some AD environments may also delete AD principals with expired passwords using an automated cleanup script.
 
 Instead of periodically rotating the password, you can also place the AD principal that represents the storage account into an organizational unit that doesn't require password rotation.
@@ -34,7 +34,7 @@ There are two options for triggering password rotation. You can use the `AzFiles
 ## Option 1: Use AzFilesHybrid module
 To regenerate and rotate the password of the AD principal that represents the storage account, use the `Update-AzStorageAccountADObjectPassword` cmdlet from the [AzFilesHybrid module](https://github.com/Azure-Samples/azure-files-samples/releases). To execute `Update-AzStorageAccountADObjectPassword`, you must:
 
-- Run the cmdlet from a domain joined client.
+- Run the cmdlet from a domain-joined client.
 - Have the owner permission on the storage account. 
 - Have AD DS permissions to change the password of the AD principal that represents the storage account.
 
@@ -59,7 +59,7 @@ If you don't want to download the `AzFilesHybrid` module, you can use [Active Di
 Replace `<domain-object-identity>` in the following script with the appropriate value for your environment:
 
 ```powershell
-$KeyName = "kerb1" # Could be either the first or second kerberos key, this script assumes we're refreshing the first
+$KeyName = "kerb1" # Could be either the first or second Kerberos key, this script assumes we're refreshing the first
 $KerbKeys = New-AzStorageAccountKey -ResourceGroupName $ResourceGroupName -Name $StorageAccountName -KeyName $KeyName
 $KerbKey = $KerbKeys.keys | Where-Object {$_.KeyName -eq $KeyName} | Select-Object -ExpandProperty Value
 $NewPassword = ConvertTo-SecureString -String $KerbKey -AsPlainText -Force