Troubleshoot: Finance users cannot mount the Azure file share

حل مشكلة: يوزرز الـ Finance مش عارفين يعملوا Mount للـ Azure file share

Ticket INC-24950: Hybrid Finance users (synced from on-premises AD, member of Finance-Users ) on Azure-joined PCs in subnet clients of vnet-office try to map \\contosofinshare.file.core.windows.net\finance and get "Access denied". SMB over TCP 445 is open from that subnet. Requirements: identity-based access with Microsoft Entra Kerberos (no account keys on PCs), no default share permission for all authenticated users, only Finance-Users can read/write the share, and the account stays behind its firewall.

The 4 tasks you will do

• Task 1 — Diagnose: network, identity source and share permissionsالمهمة 1 — التشخيص: الشبكة ومصدر الهوية وصلاحيات الـ Share
• Task 2 — Fix the network pathالمهمة 2 — صلّح طريق الشبكة
• Task 3 — Enable Microsoft Entra Kerberosالمهمة 3 — فعّل Microsoft Entra Kerberos
• Task 4 — Grant share-level access to Finance-Users onlyالمهمة 4 — إدّي صلاحية الـ Share لـ Finance-Users بس