I cannot access my Azure SMB file share as either an internal or external users (I've granted access through I AM to the external user)

Steve Gray 40 Reputation points
2025-11-05T21:09:45.0633333+00:00

I am the admin for our Azure account. I made an Azure SMB storage account. I then added several external user through Entra ID pages. I can see the storage through the Azure portal, but I've tried many different variations on a URL to allow myself and those external people to access the storage from the Windows desktop, but it won't work. I just get "cannot reach the resource" kinds of errors like you'd expect if the URL was wrong. But I can see the storage account through the portal so I'm pretty sure it exists. Thank you in advance for your help!

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
0 comments No comments
{count} votes

Answer accepted by question author
  1. Venkatesan S 925 Reputation points Microsoft External Staff Moderator
    2025-11-05T22:09:43.1433333+00:00

    Hi Steve Gray,

    Thanks for reaching out in Microsoft Q&A,

    I'm glad that issue is resolved by you and confirmed via Private message.

    • Please verify the following configuration and access points to ensure Azure Files SMB access is functioning correctly:
      1. SMB Access & Authentication Setup
        • Confirm that Azure Files SMB access is enabled on the storage account.
        • Ensure that either Active Directory Domain Services (AD DS) or Azure AD Kerberos authentication is properly configured and linked to the storage account.
      2. Conditional Access Policies
        • Check that no Conditional Access policies (such as MFA enforcement or compliant device requirements) are blocking SMB logins for Entra ID–based authentication.
      3. External (B2B) User Access
        • Verify that external (B2B) users have been invited to and have accepted the invitation in your Entra ID tenant.
        • Ensure that the appropriate Azure RBAC roles — such as Storage File Data SMB Share Reader or Storage File Data SMB Share Contributor — are assigned at the share or storage account level.
      4. Network Connectivity
        • Confirm that TCP ports 445 (SMB) and 443 (HTTPS) are open for outbound traffic on your local network and firewall.
        • Be aware that some ISPs and corporate networks block port 445, which can prevent SMB access.

    Hope this helps!

    If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.