Windows10 AzureAD user not visible in security settings

Question

_{Sunday, September 20, 2015 1:02 PM | 3 votes}

I have an office desktop PC (windows 10 PRO) and added to an Azure AD.

Two different users work on this PC, and I want to be able to set some folder rights for one of them.

However, the AzureAD\usernames do not show up in the securities tab.

What's the point of logging in on a desktop with your AzureAd ccount if I cannot manage the users' rights?

Same problem with syncing profile and accessing the MS store. It says I need a Microsoft account....

Am I too early?

All replies (5)

_{Tuesday, September 22, 2015 5:41 AM ✅Answered}

Hi PleunRijkers,

For Windows Store, yes we need Microsoft Account to access it.

We may assign a user role to external Microsoft account users (such as [email protected]) by using the Invite action to assign the user to a role in the Azure portal.

For the management, apologize to say that I am not familiar with that part.

How does the security tab look like when the Azure User account logged in?

Local admin should have no rights to change the permission with Azure Accounts, Azure accounts should be managed through Azure portal.

Role-based access control in the Microsoft Azure portal

Regards

Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Tuesday, February 2, 2016 10:18 AM}

I agree, this is totally ridiculous that you can't set file permissions for AzureAD users.

(Permissions!? who would need those in a modern operating system?)

_{Tuesday, February 2, 2016 10:38 AM}

The file permissions dialog looks exactly the same when you're logged in as an AzureAd user as a normal domain or workstation user. The issue is that windows doesn't seem to know anything about AzureAD users, even if they're currently logged in to the workstation. You can't type in the username like AzureAD\FirstLast and you can't search for them (they're not local users and they're not domain users, so can't be found with the UI).

Seems like a major bug to me. Can you refer us to a bug report that we can vote on to add the ability to add file permissions in this latest and greatest OS? 

And/or is there a way to do it from the command line? 

_{Sunday, November 13, 2016 1:08 PM | 1 vote}

Yes, it's a bad bug. You can try the following command line, though. After adding an ACL entry, the Security dialog will display the user and you can change the permissions there.

CACLS "C:\YourPath" /T /E /G AzureAD\FirstLast:C

_{Monday, November 28, 2016 8:49 PM}

Thanks, this worked for me.