Re: Implication of changing samAccountName
- From: ck <ck@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 10 Sep 2007 07:50:04 -0700
I changed my AD username recently and every day or two since, my account
appears to get locked out. I say appears because I first notice this with ISA
rejecting me. I then see that I cannot access network resources but on
checking, my account is NOT listed as locked or disabled.
If I then log out of my workstation, I cannot log back in. I have tested
with out workstations and I can't log inot them either.
If reset my password (even to the current password), everything is fine
again for a day or two.
Any thoughts? I am sure I covered all my bases related to the rename.
-c
"Chris" wrote:
We are currently carrying out this exercise on our AD. I've had no problems.
as of yet. The users maintain their local profile as the SID is the same.
The only thing i've come across is the users remembering that their username
has changed
Chris
"G Johansson" <fantomen@xxxxxxxx> wrote in message
news:OP1G9Jn1HHA.5172@xxxxxxxxxxxxxxxxxxxxxxx
I don't think they will get a new profile since the sid remains intact.
Easiest is of course to test and I'm not sure if they will get a new
profile even if the name changes...
--
G Johansson
fantomen@xxxxxxxx
"Mr. Magoo" <MrMagoo@xxxxxxxxxxxxxxxxxxxxxxxxx> skrev i meddelandet
news:E9A1AA5F-C833-474E-A0E7-3C72237411C0@xxxxxxxxxxxxxxxx
True.
The only negative impact I can think of, is that upon logon onto a
Windows
XP or Windows Visa with the renamed account, users would get the local
profile recreated;that means that IE Favorites thing, desktop wallpaper,
etc
would get lost at that point. Can you think of something else?
"G Johansson" wrote:
It will still be the same user since the SID shouldn't change.
Compare with changing usernames, display name, sAMAccountName etc. in
ADUC
for example.
--
G Johansson
fantomen@xxxxxxxx
"Mr. Magoo" <MrMagoo@xxxxxxxxxxxxxxxxxxxxxxxxx> skrev i meddelandet
news:36F4CBBF-793C-4B40-9C41-791CF90AC77E@xxxxxxxxxxxxxxxx
Currently users logon as 'domain\John Slow'
If I write an ADSI script to change samAccountName and associated
attributes
to make users logon as
'domain\Jonh.Slow'
What would be the implication? That means I would lose the SID, group
membership permissions, etc?
- Prev by Date: Re: How to Determine Which GC you use in any search?
- Next by Date: Re: AD Not working
- Previous by thread: RE: Global Security Group members disappear
- Next by thread: Re: Forest Trusts Problem
- Index(es):
Relevant Pages
|
