Attach to an Azure ShareFile using WinRM and net use

Context:

I have setup an ARM deployment from the 201-winrm-windows in azure-quickstart-template.

The deployment run fine
I can access the VM using WinRM
I can run a script remotely using WinRM

The problem is that I'm trying to setup a storage file on that VM. The official documentation ask to run this command:

net use <drive-letter>:                                       `
    \<storage-account-name>.file.core.windows.net<share-name> `
    /u:<storage-account-name> <storage-account-key>

# Result:
The command completed successfully.

The issue:

When the command is run locally (local powershell on the VM), I have a success message and the mount appear.
When the command is run through WinRM, I have the same success message but when I connect to the VM, I cannot access the mount.

My code:

$resourceGroupName  = "resourcegroupname"
$username           = "username"
$storageAccountName = "storageaccountname"
$zone               = "westeurope"
$hostName           = "$resourceGroupName.$zone.cloudapp.azure.com"
$shareFileName      = "test"
$winrmPort          = '5986'
$storageAccountKey  = "......................"

$cred = new-object                                       `
     -typename System.Management.Automation.PSCredential `
     -argumentlist $username, $password

$soptions = New-PSSessionOption -SkipCACheck

Invoke-Command                     `
    -ComputerName  $hostName       `
    -Credential    $cred           `
    -Port          $winrmPort      `
    -SessionOption $soptions       `
    -filepath      .\provision.ps1 `
    -UseSSL                        `
    -ArgumentList                  `
        $storageAccountName,       `
        $storageAccountKey,        `
        $shareFileName

And the provision file .\provision.ps1:

Param (
    [Parameter(Mandatory=$True,Position=0)]
    [string]$accountStorageName,

    [Parameter(Mandatory=$True,Position=1)]
    [string]$accountStorageKey,

    [Parameter(Mandatory=$True,Position=2)]
    [string]$shareFileName
)

net use w:                                                     `
    \\$accountStorageName.file.core.windows.net\$shareFileName `
    /user:$accountStorageName $accountStorageKey

Note:

my issue is similar to this one but the author have no response.

Upvotes: 0

Answers (2)

Mine Tanrinian Demir - MSFT

Reputation: 257

The problem you are hitting into in this case is that, WinRM runs as NetworkService. When you 'net use' through WinRM, the mount operation is done for NetworkService user, and you cannot access it through another user you connect to VM with. You'll need to ensure that the mount operation is done through same user context that you'll need to access the share as.

Upvotes: 1

forester123

Reputation: 1579

Just tried what you've done but I can access the mount successfully. A small difference is that I connect to the VM first and then mount the file share, I didn't combine these two steps into one like you did, not sure whether this is the issue but just like to share with you and for your reference.

I uploaded a file in my file share and I can access the file share and get the file as below snapshot shows:

Update access from RDP: