Unable to access storage account from VM when sas is disabled.

[Jayapriya-j]

Preflight Checklist

• I have installed the latest version of Storage Explorer.
• I have checked existing resources, including the troubleshooting guide and the release notes.
• I have searched for similar issues.

Storage Explorer Version

1.25.1

Regression From

No response

Architecture

i86

Storage Explorer Build Number

20220809

Platform

Windows

OS Version

No response

Bug Description

Unable to connect to storage account via storage explorer and browser in Azure VM when SAS is disabled. Required roles(storage blob contributor and contributor role) is already added for my identity. We are able to access other storage accounts where SAS is enabled.

Steps to Reproduce

1. Launch storgae explorer
2. expand blob containers
3. unable to expand
   error - "message": "{"message":"AADSTS53000: Device is not in required device state: compliant. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.

Actual Experience

"message": "{"message":"AADSTS53000: Device is not in required device state: compliant. Conditional Access policy requires a compliant device, and the device is not compliant. The user must enroll their device with an approved MDM provider like Intune.

Expected Experience

No response

Additional Context

No response

[craxal]

@Jayapriya-j It sounds like the storage account you're trying to access has disabled local auth (which includes auth based on keys and SAS). This is not a Storage Explorer bug. Your organization may have imposed certain requirements for accessing the storage account, which can include devices requirements. You will need to do as the error message suggests, which is to enroll your machine with your organization using Intune. I suggest contacting your administrator for details on your organization's requirements.