How Azure FileSync NTFS Permissions are handled - full tutorial

This video was created to show you how the NTFS permissions are handled in two scenarios:
1) Two Windows standalone servers in two different locations
2) Two Windows servers joined to a domain replicating data using Azure FileSync.
the demo shows what happens to the ACLs (Access Control Lists) on the files and folders when replicated across sites.
don't forget to subscribe to my channel and help me build my audience.
00:00 intro
00:45 Architecture explained
01:50 Windows SIDs explained
03:15 Standalone Servers demo
08:00 Domain Controller introduced
15:00 Summary
15:40 End Message

[@kranthikumar1758]

Thank you for the video,best explanation. I want to see more azure videos from your channel.

[@freddydubon4619]

Thank you Kumar! thank you for asking the Question

[@ihorzimovets]

Thanks for the video, great job

[@freddydubon4619]

thank you and thanks for watching!

[@Satya-rg8tu]

Very informative video. Just had a question around file changes from cloud endpoint (Azure file Shares) to server endpoint (FIle sync server) taking long. I noticed that any change on server endpoint are being updated in cloud endpoint immediately but is taking 24 hours when its other way around i.e. from Azure files shares to File Sync server. Proactive recall is not helping here and the only way to update is through the invoke command. Curious to know if there is a better way to update the namespace more frequently?

[@neiltunnah3983]

Thanks for video, I'm looking into Azure Files presently and domain security Access control is a must. From what i can see, if you have access to the shared resource environment, you could possible take control by removing ownership and adding yourself then removing unknown permissions you see.?

[@freddydubon4619]

this is a good question and I would need to confirm that, let me see if I can setup in the lab.

[@ma3con]

Thanks for the video, its very easy to understand.... But if I Have a on-prem AD sync with my AAD, Can I share a File share direct from azure and in the same time have de local file server avaliable for the customers ?

[@freddydubon4619]

Hello @ma3con, yes you can do that, all you have to do is join the Fileshare to your on prem environment. this guy does a great job explaining. jussiroine.com/2021/02/building-a-modern-file-share-using-azure-storage-to-replace-an-on-premises-file-share-solution/
let me know if you have questions. sorry for the delay in responding

[@xamashee]

Thank you for the explainer. Question. If we decommission on premises server to achieve the purpose of file server migration to file share (server less), would file permissions persist without the Windows server?

[@freddydubon4619]

The azure files share by default is not part of an active directory domain so if users are accessing it directly and you need to keep permissions you would have to sync your on prem AD to Azure AD Services and enable Azure Files to use Azure AD DS for authentication. This step involves configuring Azure Files to recognize your Azure AD DS instance, allowing it to use Kerberos for secure authentication. I hope this helps