You created an Azure Files share share1 in storage1 to store FSLogix profile containers for Microsoft Entra–joined session hosts. What must you enable on share1 to support FSLogix containers?

Microsoft Entra Kerberos is required for Azure Files shares to support FSLogix profile containers on Microsoft Entra-joined session hosts. This enables Kerberos authentication directly against Microsoft Entra ID, allowing the session hosts to access the file share securely without requiring a traditional Active Directory Domain Controller or Microsoft Entra Domain Services. A security profile set to Maximum security or Maximum compatibility are not direct configurations for enabling FSLogix on Azure Files; these are general security settings for other services or protocols. Microsoft Entra Domain Services provides managed domain controllers, but for Microsoft Entra-joined session hosts accessing Azure Files, Microsoft Entra Kerberos is the more direct and often preferred solution for authentication.