You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant and contains a storage account named storage. You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are Microsoft Entra joined. You plan to implement FSLogix profile containers for the session hosts of Pool1. In storage1, you create a new Azure Files share named share1. You need to ensure that share1 can store the FSLogix profile containers. What should you enable for share1?

Question

Accepted Answer

D. Microsoft Entra Kerberos For Microsoft Entra joined session hosts to access Azure Files shares for FSLogix profiles, you need to enable Microsoft Entra Kerberos authentication, which allows Kerberos tickets to be issued for access to the Azure File share based on Microsoft Entra identities.

Answer

A. a security profile set to Maximum security "Maximum security" is not a standard configuration option for Azure Files security profiles related to Microsoft Entra authentication.

Answer

B. a security profile set to Maximum compatibility "Maximum compatibility" is not a standard configuration option for Azure Files security profiles related to Microsoft Entra authentication.

Answer

C. Microsoft Entra Domain Services Microsoft Entra Domain Services provides a managed domain controller, but for *Microsoft Entra joined* VMs accessing Azure Files for FSLogix, Microsoft Entra Kerberos authentication is the specific mechanism required directly on the storage account for accessing File shares with AAD identities.

You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant and contains a storage account named storage. You have an Azure Virtual Desktop deployment that contains a host pool…

Question

Options

How the community answered

Why each option

Topics

Community Discussion