Re: UPN not required for users in the built-in User folder (AD) to log
- From: "Arild Bakken" <arildb_@xxxxxxxxxxx>
- Date: Sat, 14 Jan 2006 19:41:13 +0100
"Jorge Navarro" <Jorge Navarro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9E827046-DB7D-4759-A835-809554D61296@xxxxxxxxxxxxxxxx
>I am currently brushing my skills with Windows Server product in
>preparation
> for taking certification exams. I need some clarification on the use of
> user
> principal name (UPN) particularly on logging in from a windows xp pro
> machine
> to a windows 2003 server. I have got a test account in the built-in User
> folder (in Active Directory) and another account under an organizational
> unit
> used for testing. I would like to understand the reason why the first
> account
> gets authenticated by just using the user account name (without the UPN
> suffix) while the other account (under an organizational unit) is required
> to
> have UPN format in order to logon. Would appreciate your response on this.
>
> Thanks in advance,
> Jorge
This sounds like a misconfiguration somewhere. A user may choose to logon
using SAM or UPN as the logon mechanisms will recognize both. Make sure the
user selects the correct domain name from the login dialog and SAM login
should work. If it doesn't there may be some security related issues
somewhere. Have you modified the security on the OU or the domain nodes in
Active Directory? Or any changes to the Builtin container?
I've seen occasions with the opposite problem where UPN logon may prevent a
user from changing his or her password if security is too strict.
Regards,
Arild
.
- Prev by Date: Re: Can I automate e-mail configurations for AD?
- Next by Date: Re: Can I automate e-mail configurations for AD?
- Previous by thread: To Joe Richards
- Next by thread: how can i know how many users have logged on into the domain?
- Index(es):
Relevant Pages
|