An Azure service that offers file shares in the cloud.
Hi rr-4098,
Thanks for reaching out in Microsoft Q&A forum,
Yes, you can absolutely do exactly that. Since you already have Azure File Sync running with cloud tiering enabled, your data is already syncing to Azure in the background. Here’s how to complete the migration and retire your on-premises server:
Migration:
- Let the initial sync finish Your files are already syncing to Azure. With cloud tiering active, files not accessed in your specified number of days are already tiered to Azure, while hot files stay local.
- Do a final sync before cutover
- Make your on-prem share read-only (or stop SMB sharing) to prevent new changes
- Wait about 1 hour for any remaining changes to sync to Azure. Azure File Sync syncs changes in near-real-time (seconds to minutes), so this delay ensures everything is up to date.
- Remove the server endpoint
- In the Azure portal, go to your Storage Sync Service > Sync groups > Server endpoints
- Delete the server endpoint (this stops syncing but keeps all data in Azure)
- Your files remain intact in the Azure file share
- Cut over to Azure Files
- Redirect users directly to the Azure file share endpoint (
\\<storageaccount>.file.core.windows.net\<sharename>) - Or use DFS Namespaces to keep the same UNC path (
\\domain\<sharename>) so users don’t notice the change
- Redirect users directly to the Azure file share endpoint (
- Unregister and decommission
- After verifying everything works for 2–4 weeks, unregister the server from Azure File Sync
- Then you can safely retire/decommission your on-premises file server
Preserves NTFS permissions: ACLs are maintained during sync – no need for extra migration tools
Minimal downtime: Only the final cutover requires downtime (usually < 1 hour)
No extra tools needed: Azure File Sync handles everything; you don’t need Storage Migration Service or AZCopy
Transparent to users: With DFS-N, users keep the same file paths and don’t need to change anything
This is a recommended and supported migration pattern that Microsoft documents for replacing Windows file servers with Azure Files.
Update:
Do share permissoin on the Azure file share need to be updated at all before migrating
No, share permissions on Azure Files usually don't need updating when migrating with Azure File Sync.
Since File Sync is already running successfully, NTFS permissions (file/folder ACLs) get preserved automatically during sync. Users will have the same access after cutover.
Share-level permissions should already work because users can access tiered ("cold") files in Azure right now.
Quick check before cutover: Have someone test \\<storageaccount>.file.core.windows.net\<sharename>. If tiered files are accessible, you're set.
Only update if needed: If access fails, add Storage File Data SMB Share Contributor role via Storage Account > IAM.
After cutover, everything stays the same - especially with DFS Namespaces.
Official Microsoft documentation
- Replace Windows File Servers with Azure File Sync: Replace Windows File Servers with Azure File Sync | Microsoft Learn
- Replace an Azure File Sync Server (deprovisioning steps): Replace an Azure File Sync Server | Microsoft Learn
- Migration Overview for SMB Azure File Shares: Migration Overview for SMB Azure File Shares | Microsoft Learn
- Manage Registered Servers (unregistering): Manage Registered Servers with Azure File Sync | Microsoft Learn
- Azure Files Share Permissions
- File Sync NTFS Handling
Kindly let us know if the above helps or you need further assistance on this issue.
Please do not forget to
and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.