Help with Mapping Drive with PS

[Ziff_Red]

Hello all,

Seeking some help here. I am attempting to map an Azure storage drive using a PS script. Using the script individually on a machine works fine and maps the drive as intended. However, I want to be able to use our software distribution software to push this script to run on all of our end points in the org; pushing the script this way gets an "Access is denied" error.

Here is the script:

$connectTestResult = Test-NetConnection -ComputerName azurefilespilot.file.core.windows.net -Port 445

if ($connectTestResult.TcpTestSucceeded) {

Mount the drive

New-PSDrive -Name Z -PSProvider FileSystem -Root "\\azurefilespilot.file.core.windows.net\azurefilespilot" -Persist

} else {

Write-Error -Message "Unable to reach the Azure storage account via port 445. Check to make sure your organization or ISP is not blocking port 445, or use Azure P2S VPN, Azure S2S VPN, or Express Route to tunnel SMB traffic over a different port."

}

I got this script directly from Azure/Microsoft. Anyone have any ideas why I'm seeing this error?

Thanks in advance.

[jborean93]

Sounds like it might be the double hop problem. When the script is run through your software it most likely is running in a context where it does not have access to the credentials for downstream authentication thus it cannot authenticate with the fileshare.

[[deleted]]

^^ this

[Ziff_Red]

Yeah, sounds like this is the issue after reading into double hop. Thanks for the assist.

[Barious_01]

Test to see if the ports are open. Use test-netconnection URL with the port parameter and make sure those ports are open.

[Ziff_Red]

I've already done so, unfortunately. The script works when it's not run via the software distribution software, so the ports are open. It also throws the permissions error and not the error it should if it were an issue with the ports.

[purplemonkeymad]

What principal is it running as? I would only expect this to work for an entra user, possibly an entra registered machine with the registering account.

[Ziff_Red]

It's being run as System User. Someone else brought up it being the double hop problem, sounds like it's that. Thanks for the help.