You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/create-active-directory-connections.md
+7-11Lines changed: 7 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -22,11 +22,7 @@ Several features of Azure NetApp Files require that you have an Active Directory
22
22
23
23
* An Azure NetApp Files account must be created in the region where the Azure NetApp Files volumes are to be deployed.
24
24
25
-
* By default, Azure NetApp Files allows only one Active Directory (AD) connection per subscription.
26
-
27
-
You can [create one Active Directory connection per NetApp account](#multi-ad).
28
-
29
-
Before enrolling in this feature, check the [Active Directory type](#netapp-accounts-and-active-directory-type) field in your account page.
25
+
* Azure NetApp Files, by default, allows one Active Directory (AD) connection per subscription. You can modify the default to [create one Active Directory connection per NetApp account](#multi-ad).
30
26
31
27
* The Azure NetApp Files AD connection admin account must have the following properties:
32
28
* It must be an AD DS domain user account in the same domain where the Azure NetApp Files computer accounts are created.
@@ -94,7 +90,7 @@ For more information about the relationship between NetApp accounts and subscrip
94
90

95
91
96
92
>[!NOTE]
97
-
>By default, Azure NetApp Files supports only one Active Directory connection within the same region and the same subscription. You can [create one Active Directory connection per NetApp account](#multi-ad).
93
+
>By default, Azure NetApp Files supports only one Active Directory connection within the same region and the same subscription. You can modify this setting to [create one Active Directory connection per NetApp account](#multi-ad).
98
94
99
95
2. In the Join Active Directory window, provide the following information, based on the Domain Services you want to use:
100
96
@@ -105,14 +101,14 @@ For more information about the relationship between NetApp accounts and subscrip
105
101
This is the IP address of the secondary DNS server that is required for Active Directory domain join operations, SMB authentication, Kerberos, and LDAP operations.
106
102
107
103
>[!NOTE]
108
-
>It is recommended that you configure a Secondary DNS server. See [Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files](understand-guidelines-active-directory-domain-service-site.md). Ensure that your DNS server configuration meets the requirements for Azure NetApp Files. Otherwise, Azure NetApp Files service operations, SMB authentication, Kerberos, or LDAP operations might fail.
104
+
>It's recommended that you configure a Secondary DNS server. See [Understand guidelines for Active Directory Domain Services site design and planning for Azure NetApp Files](understand-guidelines-active-directory-domain-service-site.md). Ensure that your DNS server configuration meets the requirements for Azure NetApp Files. Otherwise, Azure NetApp Files service operations, SMB authentication, Kerberos, or LDAP operations might fail.
109
105
110
106
If you use Microsoft Entra Domain Services, use the IP addresses of the Microsoft Entra Domain Services domain controllers for Primary DNS and Secondary DNS respectively.
111
107
112
108
* **AD DNS Domain Name (required)**
113
109
This is the fully qualified domain name of the AD DS used with Azure NetApp Files (for example, `contoso.com`).
114
110
* **AD Site Name (required)**
115
-
This is the AD DS site name that Azure NetApp Files USES for domain controller discovery.
111
+
This is the AD DS site name that Azure NetApp Files uses for domain controller discovery.
116
112
117
113
The default site name for both AD DS and Microsoft Entra Domain Services is `Default-First-Site-Name`. Follow the [naming conventions for site names](/troubleshoot/windows-server/identity/naming-conventions-for-computer-domain-site-ou#site-names) if you want to rename the site name.
118
114
@@ -283,12 +279,12 @@ For more information about the relationship between NetApp accounts and subscrip
283
279
284
280
## <a name="multi-ad"></a> Create one Active Directory connection per NetApp account
285
281
286
-
By default, Azure NetApp Files supports one AD connection per subscription and region. If you've enabled this feature, Azure NetApp Files supports each NetApp account within an Azure subscription can have its own AD connection.
282
+
The current default behavior of Azure NetApp Files supports one AD connection per subscription and region. By enabling this feature, you modify behavior so that each NetApp account within an Azure subscription can have its own AD connection.
287
283
288
-
Once configured, the AD connection of the NetApp account is used when you create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). That means, Azure NetApp Files supports more than one AD connection per Azure subscription when multiple NetApp accounts are used.
284
+
Once configured, the AD connection of the NetApp account is used when you create an [SMB volume](azure-netapp-files-create-volumes-smb.md), a [NFSv4.1 Kerberos volume](configure-kerberos-encryption.md), or a [dual-protocol volume](create-volumes-dual-protocol.md). That means Azure NetApp Files supports more than one AD connection per Azure subscription when multiple NetApp accounts are used.
289
285
290
286
>[!NOTE]
291
-
>If a subscription has both this and the [Shared Active Directory](#shared_ad) feature enabled, its existing accounts still share the AD configuration. Any new NetApp accounts created on the subscription can use their own AD configurations. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
287
+
>If a subscription has both this feature and the [Shared Active Directory](#shared_ad) feature enabled, its existing accounts still share the AD configuration. Any new NetApp accounts created on the subscription can use their own AD configurations. You can confirm your configuration in your account overview page in the [AD type](#netapp-accounts-and-active-directory-type) field.
292
288
293
289
>[!IMPORTANT]
294
290
>The scope of each AD configuration is limited to its parent NetApp account.
0 commit comments