UPN suffix what is the real benefit
aconti
Hello, what is the advantage you get when you create additional UPN
suffixes. Let's say that for example I have a child domain
north.test.com and I create a user with the UPN suffix of test.com The
user will still be created in the child domain and not in the parent
domain right ?
Thank you
--
aconti
------------------------------------------------------------------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1238972.htm
Meinolf Weber [MVP-DS]
The additional UPN suffix can help users to logon with an easier name then
"us...@this.is.my.domain.name.in.denver.com", for example "user@denver", if
you create an UPN suffix Denver.
Also see:
http://technet.microsoft.com/en-us/library/cc739093(WS.10).aspx
http://support.microsoft.com/kb/243280/
and problems that may occur on specific configurations:
http://support.microsoft.com/kb/321074/en-us
Or do you talk about Exchange configuration:
http://support.microsoft.com/kb/325921/en-us
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> Hello, what is the advantage you get when you create additional UPN
> suffixes. Let's say that for example I have a child domain
> north.test.com and I create a user with the UPN suffix of test.com The
> user will still be created in the child domain and not in the parent
> domain right ?
>
> Thank you
>
Marcin
UPN suffixes simplifies suffix routing between forests and provide you with
ability to separate naming convention from your forest hierarchy (which
provides flexibility and security benefits)...
hth
Marcin
"aconti" <aconti...@DoNotSpam.com> wrote in message
news:aconti...@DoNotSpam.com...
aconti
When I specify a UPN suffix can I choose whatever I want like
user@office or the name after the @ sign has to be part of the real
domain that I have in the forest. In case I choose to add users I can
therefore add them with the UPN suffix and every user in the forest will
have the same name appended to his username right ?
Florian Frommherz [MVP]
aconti schrieb:
> When I specify a UPN suffix can I choose whatever I want like
> user@office or the name after the @ sign has to be part of the real
> domain that I have in the forest. In case I choose to add users I can
> therefore add them with the UPN suffix and every user in the forest will
> have the same name appended to his username right ?
You can basically choose anything you want although I'd choose something
users can relate to. It doesn't make much sense to log them in as
je...@mickymouseclub.com if you're selling vehicles.
Also, if you're configuring multiple UPNs for the forest, you'll need to
define what UPN a user's got to use for her logon. You can do that at
the "Account" tab in a user account's "Properties" dialog. There's a
drop down list for that. You can either use one UPN for all users or
have groups of users (or every single user) have different UPNs.
Note that for a mass UPN change, you can easily script it. The attribute
can be written just as any other attribute in the directory. You're
looking for "userPrincipleName". Be sure to type the UPN correctly in
the script, when scripting, your UPN choices aren't limited to the UPNs
configured for the forest as is if you're on the GUI - you can use any
UPN you want.
Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Florian Frommherz [MVP]
Florian Frommherz [MVP] schrieb:
> You can basically choose anything you want although I'd choose something
> users can relate to. It doesn't make much sense to log them in as
> je...@mickymouseclub.com if you're selling vehicles.
Take that statement as: either choose your domain name or the domain
name of the root domain. Make "sales.mycompany.com" be "mycompany.com"
to leave the "sales" out. I'd keep that as easy as possible if people
are supposed to remember and actively use the UPNs.