Re: DSMOD -UPN

Tech-Archive recommends: Fix windows errors by optimizing your registry

although you do not see a UPN configured in ADUC, each user in AD has a UPN whether or not you configure it.

* each user in AD by default has an IMPLICIT UPN which always matches <sAMAccountName>@<AD DOMAIN>. The implicit UPN is just there!
* additionally you can configure an EXPLICIT UPN which can basically be anything like for example the e-mail address <My Name>@<My Comapnies Domain>. The explicit UPN for a user is stored in the userPrincipalName attribute

whether or not you use the explicit UPN, authentication will always revert to and use the implicit UPN. The ability to configure another UPN is just accomodate admins to configure another UPN

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Steve Audus, Chaucer BEC, Sheffield UK" <SteveAudusChaucerBECSheffieldUK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:B85FB8B8-D057-43A9-A193-EDEB71FB0621@xxxxxxxxxxxxxxxx
We have a large selection of users without userPrinicipalName, which is
required for the authentication for our internet filter. I'd like to quickly
do a dsquery and dsmod script to correct this problem, but am stuck with the
syntax.

Can anyone help? the UPN should be %username%@xxxxxxxxxxxxxxxxxxx

Any suggestions?

Thank you

.

Relevant Pages

  • Re: Modify UPN Prefix on existing user accounts
    ... like ILM can generate a unique sAMAccountName, it should also be able to generate a unique UPN of the user ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... them if AD was authoritative for UPN and they replied yes. ...
    (microsoft.public.windows.server.active_directory)
  • Re: NT domain users missing username@domain entries
    ... This posting is provided "AS IS" with no warranties, ... the explicit UPN COULD BE: ... Implicit UPN: Has the form "username@FQDNDomainName". ... Explicit UPN: Has the form "userIDstring@FQDNstring". ...
    (microsoft.public.windows.server.active_directory)
  • Re: NT domain users missing username@domain entries
    ... Please no e-mails, any questions should be posted in the NewsGroup ... This posting is provided "AS IS" with no warranties, ... Implicit UPN: Has the form "username@FQDNDomainName". ... Explicit UPN: Has the form "userIDstring@FQDNstring". ...
    (microsoft.public.windows.server.active_directory)
  • Re: DSMOD -UPN
    ... what do you want the UPN to be? ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... The explicit UPN for a user is stored in the userPrincipalName ...
    (microsoft.public.windows.server.active_directory)
  • Re: Rendom does not modify default suffix upn ?
    ... I dont have any explicit UPN defined. ... I can change the value quite quickly by selecting all my user accounts, ... Do I have to run a script to modify every existing account? ...
    (microsoft.public.windows.server.active_directory)