Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » multiple User logon name?
multiple User logon name? [message #156056] Tue, 09 June 2009 19:53 Go to next message
vdz  is currently offline vdz
Messages: 50
Registered: July 2009
Member
Hi All,

Is it possible to have multiple user logon name? such as user John Smith,
could he have either jsmith or john.smith?
The reason being is that we are merging with another company. Our user logon
name is jsmith but they have john.smith. So to avoid confusion, once I get
migration done both users can have both username logon name and it is up to
them to use.
If it can't be done, I have to make an executive decision.

Thanks in advance
Re: multiple User logon name? [message #156062 is a reply to message #156056] Tue, 09 June 2009 20:36 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"vdz" <vdz@discussions.microsoft.com> wrote in message
news:65768652-6D34-4428-BB01-4D0D1752E030@microsoft.com...
> Hi All,
>
> Is it possible to have multiple user logon name? such as user John Smith,
> could he have either jsmith or john.smith?
> The reason being is that we are merging with another company. Our user
> logon
> name is jsmith but they have john.smith. So to avoid confusion, once I get
> migration done both users can have both username logon name and it is up
> to
> them to use.
> If it can't be done, I have to make an executive decision.
>
> Thanks in advance
>


Usernames must be unique. During M/As (mergers and acquisitions), the
acquiring partner will normally dicate the rules of acquisition. So there
needs to be an agreement on how to keep the names unique. Usually the
company doing the buying will keep their names as is, and the company being
merged will be the one that needs to change that needs to be done before the
migration.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay
Re: multiple User logon name? [message #156064 is a reply to message #156062] Tue, 09 June 2009 20:47 Go to previous messageGo to next message
vdz  is currently offline vdz
Messages: 50
Registered: July 2009
Member
Thank you for your response.
that is what I thought too, username must be unique.

Regards,

"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "vdz" <vdz@discussions.microsoft.com> wrote in message
> news:65768652-6D34-4428-BB01-4D0D1752E030@microsoft.com...
> > Hi All,
> >
> > Is it possible to have multiple user logon name? such as user John Smith,
> > could he have either jsmith or john.smith?
> > The reason being is that we are merging with another company. Our user
> > logon
> > name is jsmith but they have john.smith. So to avoid confusion, once I get
> > migration done both users can have both username logon name and it is up
> > to
> > them to use.
> > If it can't be done, I have to make an executive decision.
> >
> > Thanks in advance
> >
>
>
> Usernames must be unique. During M/As (mergers and acquisitions), the
> acquiring partner will normally dicate the rules of acquisition. So there
> needs to be an agreement on how to keep the names unique. Usually the
> company doing the buying will keep their names as is, and the company being
> merged will be the one that needs to change that needs to be done before the
> migration.
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
> aceman@mvps.RemoveThisPart.org
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> "Efficiency is doing things right; effectiveness is doing the right
> things." - Peter F. Drucker
> http://twitter.com/acefekay
>
>
>
>
Re: multiple User logon name? [message #156066 is a reply to message #156064] Tue, 09 June 2009 21:38 Go to previous messageGo to next message
rlmueller-nospam  is currently offline rlmueller-nospam  United States
Messages: 292
Registered: July 2009
Senior Member
Part of the confusion arises because users have several names, and they can
logon with two of them.

The Distinguished Name (DN) of the user must be unique in the forest. For
example, cn=Jim Smith,ou=West,dc=MyDomain,dc=com. Users do not logon with
this.

Part of the DN is the value of the "cn" attribute, the Common Name. In my
example this is "Jim Smith". This must be unique in the OU/Container (in
this case ou=West,dc=MyDomain,dc=com). The "Name" of the user is "cn=Jim
Smith". For example ADUC uses this in the field labeled "Name". There can be
several objects with Name "cn=Jim Smith", as long as they are in different
OU/Containers.

The value of the sAMAccountName attribute is called the "pre-Windows 2000
logon name". This must be unique in the domain. In combination with the
NetBIOS name of the domain, it is unique in the forest, and users can logon
with this. In the example above, the "pre-Windows 2000 logon name" could be
"JimSmith". The user could logon to the domain "MyDomain" as "JimSmith".
This shows up on the "Account" tab of ADUC.

The user can also logon with their userPrincipalName, which is similar to an
email address. This must be unique in the forest. In the example above, it
could be JimSmith@MyDomain.com. This is called the "User logon name" on the
"Account" tab of ADUC. By default when you create a user in ADUC, the
userPrincipalName is <sAMAccountName>@<DNSDomainName>, but this can be
changed to something else in the same format. In my example <sAMAccountName>
is JimSmith and <DNSDomainName> is MyDomain.com, but you could instead make
it JSmith@MyDomain.com. You can even create your own suffix for another
domain and make the userPrincipalName JimSmith@AnotherDomain.com.

There are other name attributes, like givenName (first name), sn (last name
or surname), displayName, etc., but they are not even required to have
values and are just for information. The only attributes to worry about are
sAMAccountName, distinguishedName, and userPrincipalName.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"vdz" <vdz@discussions.microsoft.com> wrote in message
news:45072133-E699-41D5-ADC4-829DAD01172B@microsoft.com...
> Thank you for your response.
> that is what I thought too, username must be unique.
>
> Regards,
>
> "Ace Fekay [Microsoft Certified Trainer]" wrote:
>
>> "vdz" <vdz@discussions.microsoft.com> wrote in message
>> news:65768652-6D34-4428-BB01-4D0D1752E030@microsoft.com...
>> > Hi All,
>> >
>> > Is it possible to have multiple user logon name? such as user John
>> > Smith,
>> > could he have either jsmith or john.smith?
>> > The reason being is that we are merging with another company. Our user
>> > logon
>> > name is jsmith but they have john.smith. So to avoid confusion, once I
>> > get
>> > migration done both users can have both username logon name and it is
>> > up
>> > to
>> > them to use.
>> > If it can't be done, I have to make an executive decision.
>> >
>> > Thanks in advance
>> >
>>
>>
>> Usernames must be unique. During M/As (mergers and acquisitions), the
>> acquiring partner will normally dicate the rules of acquisition. So there
>> needs to be an agreement on how to keep the names unique. Usually the
>> company doing the buying will keep their names as is, and the company
>> being
>> merged will be the one that needs to change that needs to be done before
>> the
>> migration.
>>
>> --
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
>> Microsoft Certified Trainer
>> aceman@mvps.RemoveThisPart.org
>>
>> For urgent issues, you may want to contact Microsoft PSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> "Efficiency is doing things right; effectiveness is doing the right
>> things." - Peter F. Drucker
>> http://twitter.com/acefekay
>>
>>
>>
>>
Re: multiple User logon name? [message #156070 is a reply to message #156066] Tue, 09 June 2009 22:32 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Richard Mueller [MVP]" <rlmueller-nospam@ameritech.nospam.net> wrote in
message news:%2316nyzX6JHA.3860@TK2MSFTNGP05.phx.gbl...
> Part of the confusion arises because users have several names, and they
> can logon with two of them.
>
> The Distinguished Name (DN) of the user must be unique in the forest. For
> example, cn=Jim Smith,ou=West,dc=MyDomain,dc=com. Users do not logon with
> this.
>
> Part of the DN is the value of the "cn" attribute, the Common Name. In my
> example this is "Jim Smith". This must be unique in the OU/Container (in
> this case ou=West,dc=MyDomain,dc=com). The "Name" of the user is "cn=Jim
> Smith". For example ADUC uses this in the field labeled "Name". There can
> be several objects with Name "cn=Jim Smith", as long as they are in
> different OU/Containers.
>
> The value of the sAMAccountName attribute is called the "pre-Windows 2000
> logon name". This must be unique in the domain. In combination with the
> NetBIOS name of the domain, it is unique in the forest, and users can
> logon with this. In the example above, the "pre-Windows 2000 logon name"
> could be "JimSmith". The user could logon to the domain "MyDomain" as
> "JimSmith". This shows up on the "Account" tab of ADUC.
>
> The user can also logon with their userPrincipalName, which is similar to
> an email address. This must be unique in the forest. In the example above,
> it could be JimSmith@MyDomain.com. This is called the "User logon name" on
> the "Account" tab of ADUC. By default when you create a user in ADUC, the
> userPrincipalName is <sAMAccountName>@<DNSDomainName>, but this can be
> changed to something else in the same format. In my example
> <sAMAccountName> is JimSmith and <DNSDomainName> is MyDomain.com, but you
> could instead make it JSmith@MyDomain.com. You can even create your own
> suffix for another domain and make the userPrincipalName
> JimSmith@AnotherDomain.com.
>
> There are other name attributes, like givenName (first name), sn (last
> name or surname), displayName, etc., but they are not even required to
> have values and are just for information. The only attributes to worry
> about are sAMAccountName, distinguishedName, and userPrincipalName.
>
> --

Hi Richard,

I was trying to avoid explaining it, but I must say that was a great
explanation!

I usually just tell my customers to avoid confusion, to simply stick with a
unique naming scheme and making sure the UPN and the Pre-Windows name, as
well as the Exchange alias are all the same. I've found in larger
global-based companies ( I used to work for a global pharma with 5000 users,
4500 mailboxes, 10 sites, etc), with when the names vary, which are allowed
as long as following the rules you mentioned, it even gets the help desk
folks confused, and when they escalate it to us, I have to do a little
digging to straighten out which user is which. It was implemented this way
long before I got there. Little by little we straightened it out as we came
across them.

Cheers!

Ace
Re: multiple User logon name? [message #156076 is a reply to message #156066] Wed, 10 June 2009 00:32 Go to previous messageGo to next message
vdz  is currently offline vdz
Messages: 50
Registered: July 2009
Member
Thank you Richard that is great and detailed explanation.

I'd better keep them all the same format, as Ace mentioned to avoid
confusion later on as the business grows and more users, we keep them as
unique naming schema.

Again thank you all

"Richard Mueller [MVP]" wrote:

> Part of the confusion arises because users have several names, and they can
> logon with two of them.
>
> The Distinguished Name (DN) of the user must be unique in the forest. For
> example, cn=Jim Smith,ou=West,dc=MyDomain,dc=com. Users do not logon with
> this.
>
> Part of the DN is the value of the "cn" attribute, the Common Name. In my
> example this is "Jim Smith". This must be unique in the OU/Container (in
> this case ou=West,dc=MyDomain,dc=com). The "Name" of the user is "cn=Jim
> Smith". For example ADUC uses this in the field labeled "Name". There can be
> several objects with Name "cn=Jim Smith", as long as they are in different
> OU/Containers.
>
> The value of the sAMAccountName attribute is called the "pre-Windows 2000
> logon name". This must be unique in the domain. In combination with the
> NetBIOS name of the domain, it is unique in the forest, and users can logon
> with this. In the example above, the "pre-Windows 2000 logon name" could be
> "JimSmith". The user could logon to the domain "MyDomain" as "JimSmith".
> This shows up on the "Account" tab of ADUC.
>
> The user can also logon with their userPrincipalName, which is similar to an
> email address. This must be unique in the forest. In the example above, it
> could be JimSmith@MyDomain.com. This is called the "User logon name" on the
> "Account" tab of ADUC. By default when you create a user in ADUC, the
> userPrincipalName is <sAMAccountName>@<DNSDomainName>, but this can be
> changed to something else in the same format. In my example <sAMAccountName>
> is JimSmith and <DNSDomainName> is MyDomain.com, but you could instead make
> it JSmith@MyDomain.com. You can even create your own suffix for another
> domain and make the userPrincipalName JimSmith@AnotherDomain.com.
>
> There are other name attributes, like givenName (first name), sn (last name
> or surname), displayName, etc., but they are not even required to have
> values and are just for information. The only attributes to worry about are
> sAMAccountName, distinguishedName, and userPrincipalName.
>
> --
> Richard Mueller
> MVP Directory Services
> Hilltop Lab - http://www.rlmueller.net
> --
>
> "vdz" <vdz@discussions.microsoft.com> wrote in message
> news:45072133-E699-41D5-ADC4-829DAD01172B@microsoft.com...
> > Thank you for your response.
> > that is what I thought too, username must be unique.
> >
> > Regards,
> >
> > "Ace Fekay [Microsoft Certified Trainer]" wrote:
> >
> >> "vdz" <vdz@discussions.microsoft.com> wrote in message
> >> news:65768652-6D34-4428-BB01-4D0D1752E030@microsoft.com...
> >> > Hi All,
> >> >
> >> > Is it possible to have multiple user logon name? such as user John
> >> > Smith,
> >> > could he have either jsmith or john.smith?
> >> > The reason being is that we are merging with another company. Our user
> >> > logon
> >> > name is jsmith but they have john.smith. So to avoid confusion, once I
> >> > get
> >> > migration done both users can have both username logon name and it is
> >> > up
> >> > to
> >> > them to use.
> >> > If it can't be done, I have to make an executive decision.
> >> >
> >> > Thanks in advance
> >> >
> >>
> >>
> >> Usernames must be unique. During M/As (mergers and acquisitions), the
> >> acquiring partner will normally dicate the rules of acquisition. So there
> >> needs to be an agreement on how to keep the names unique. Usually the
> >> company doing the buying will keep their names as is, and the company
> >> being
> >> merged will be the one that needs to change that needs to be done before
> >> the
> >> migration.
> >>
> >> --
> >> Ace
> >>
> >> This posting is provided "AS-IS" with no warranties or guarantees and
> >> confers no rights.
> >>
> >> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> >> Microsoft Certified Trainer
> >> aceman@mvps.RemoveThisPart.org
> >>
> >> For urgent issues, you may want to contact Microsoft PSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> "Efficiency is doing things right; effectiveness is doing the right
> >> things." - Peter F. Drucker
> >> http://twitter.com/acefekay
> >>
> >>
> >>
> >>
>
>
>
Re: multiple User logon name? [message #156091 is a reply to message #156076] Wed, 10 June 2009 06:31 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"vdz" <vdz@discussions.microsoft.com> wrote in message
news:E096C745-F8BE-4474-85B6-5FFE4AA08A9A@microsoft.com...
> Thank you Richard that is great and detailed explanation.
>
> I'd better keep them all the same format, as Ace mentioned to avoid
> confusion later on as the business grows and more users, we keep them as
> unique naming schema.
>
> Again thank you all
>

You are welcome!

Ace
Previous Topic:Moving a user from a child domain to a parent domain.
Next Topic:2 DC's in single domain with 2 Vlans
Goto Forum:
  


Current Time: Sat Jan 20 08:30:07 MST 2018

Total time taken to generate the page: 0.03713 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software