FIX: Windows error

This general article lists issues that may be associated with Microsoft Azure Files when connecting from firewallslash.com clients. It also provides possible causes and file sizes for these issues. In addition to the troubleshooting steps in this article, you can also use AzFileDiagnostics if you want to make sure your Windows native client environment has the correct prerequisites. AzFileDiagnostics automates the detection of most of the symptoms described in this article and helps you tune your environment for the best performance.

Related To

When you try to mount a file, you may receive the following error message:

Reason 1: Unencrypted Communication Channel

For some reason, secure connections to Azure file shares are blocked if the communication channel is not encrypted, and if the connection attempt is not from the same datacenter as all file sharess Azure. If this Require secure transfer setting is enabled for a storage account, unencrypted connections within the same datacenter will be blocked at the same time. An encrypted communication channel is provided only if the end user’s individual operating system supports SMB.8 encryption,

Windows Windows Server 2012 and later negotiate requests on each system, which may include SMB 3.x that supports encryption.

Solution To Get 1

1. The connection calls a client that experts say supports SMB encryption (Windows 8/Windows Server 2012 or later).
2. A connection from a primary computer in the same datacenter as the Azure storage account will undoubtedly be used for Azure File Sharing.
3. Make sure Require secure transfer is frequently disabled for a storage account if the client does not support SMB encryption.

Reason 2: Garage Storage Account May Have B Rules Enabled Virtual Network Firewall

Network traffic is denied if exclusive networking (VNet) and firewall rules are typically configured on the storage account until the client’s IP address or network is specified in the authorization list.

Source 2 Solution

Virtually make sure network and software policies are properly configured for specific storage accounts. To check if network rules or firewall rules are causing the problem, temporarily change the layout of the storage account to Allow access from all networks. For more information, see Configuring firewalls and Azure storage virtual networks.

Obviously, when end users can view an Azure file share using Active Directory (AD) or Azure Active Domain Services (Azure AD DS) validation, access to the file share fails with an “Access Denied” error. Forgotten permissions at the sharing level. wrong.

Level 3 Lead Solution

If you try to mount a boot share from another eligible datacenter, or locally from another eligible datacenter, you may receive the following errors:

Reason 1: Port 445 Is Blocked

System error 53 or error 67 occurs when the outbound port is 445 corresponding to theAzure Files data processing pipeline is often blocked. For a summary of ISPs that allow or deny access on port 445, see TechNet.

To check if your firewall or ISP is blocking port 445, use the new AzFileDiagnostics tool or the Test-NetConnection cmdlet.< /code>p>

In order to use the Test-NetConnection cmdlet, the blue PowerShell module must be installed. For more information, see Install the Azure PowerShell Module. Don’t forget to replace And which have the appropriate names for your primary storage account .

$resourceGroupName = ""
$storageAccountName ""

# equals This command sometimes requires you to sign in to your Azure account. Run the Login-AzAccount task if you haven't already.
# already logged in.
$storageAccount Get-AzStorageAccount = -ResourceGroupName $resourceGroupName -Name $storageAccountName

# Computer or hostname, probably .file.core.windows.net for Azure public regions.
# $storageAccount.Context.FileEndpoint is being used because a privateAzure scope, such as sovereign clouds
# or Azure Stack deployments have different offerings for Azure file shares (and additional storage).
Test-NetConnection -ComputerName([System.Uri]::new($storageAccount.Context.FileEndPoint).Host) -Port 445

If the connection was successful, you want to see the following result:

Computer name: 
RemoteAddress: 
Remote port: 445
Interface alias: 
source address. 
TcpTestSucceeded: True

Remove Root Cause 1

Solution 1: Use Azure File Sync

Azure File Sync can turn your own on-premises Windows server into a high-speed Azure File Cache. You can use any method available on Windows Server to connect to your data locally, including SMB, NFS, and FTPS. File Azure Sync works fine on port 443 and can then be used as a workaround to access File Azure from clients that block port 445. Learn how to set up Azure File Sync.2

Decision. Use a VPN

When configuring the correct VPN for a specific storage account, trAfiq is routed through the correct secure tunnel, unlike the Internet. Follow the direct VPN setup instructions to access Azure Files from Windows.

Solution 3: Unlock – City 445 with your ISP/IT Admin

Also, contact your ISP and IT department to open outbound port 445 for Azure IP address ranges.

Solution: Use REST API based tools like Explorer/Powershell

Azure Storage Files supports REST in addition to SMB. REST access capabilities on port 443 (standard TCP). There are various tools written using the REST API that provide UI loading. Storage Explorer is one of them. Download and install Storage Explorer and connect to the Azure Files-based music file share. You can also use PowerShell which additionally uses the REST API.

Reason 2: NTLMv1 May Be Enabled

System error 53 or system error eighty-seven may occur if the client hasNTLMv1 letters. Azure Files only supports NTLMv2 authentication. Enabling NTLMv1 creates a less secure perspective. Therefore, communication for Azure Files is blocked.

To determine if this is the cause of your error, verify that the following registry subkey is not set to a value less than 3:

Resolution Of Reason 2

Reset the default value of LmCompatibilityLevel from 3 in the following computer registry subkey:

Error 1816. Usually There Is Not Enough Quota To Process This Command

Reason

Error 1816 occurs when you reach the upper limit of concurrent open handles allowed on a file or directory in Azure File. For more information, see Azure Files Scale Targets.

Solution

Reduce the number of handles open at the same time by closing multiple tackles and try again. For more information, see Azure Microsoft Storage performance and/or scalability checklist. Show

To open available handles to a shared folder, directory, or home, useGet-AzStorageFileHandle PowerShell mandlet.

Use the Close-AzStorageFileHandle PowerShell cmdlet to best control the opening of a file, directory, or file entry.

If you try to simplify access or remove the Azure File Stake in the portal, you may receive the following error: