Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » UPN suffix what is the real benefit
UPN suffix what is the real benefit [message #160466] Fri, 28 August 2009 23:02 Go to next message
aconti  is currently offline aconti  United States
Messages: 113
Registered: August 2009
Senior Member
Hello, what is the advantage you get when you create additional UPN
suffixes. Let's say that for example I have a child domain
north.test.com and I create a user with the UPN suffix of test.com The
user will still be created in the child domain and not in the parent
domain right ?

Thank you


--
aconti
------------------------------------------------------------ ------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1238972.htm

http://forums.techarena.in
Re: UPN suffix what is the real benefit [message #160469 is a reply to message #160466] Sat, 29 August 2009 03:20 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello aconti,

The additional UPN suffix can help users to logon with an easier name then
"user@this.is.my.domain.name.in.denver.com", for example "user@denver", if
you create an UPN suffix Denver.

Also see:
http://technet.microsoft.com/en-us/library/cc739093(WS.10).aspx

http://support.microsoft.com/kb/243280/

and problems that may occur on specific configurations:
http://support.microsoft.com/kb/321074/en-us

Or do you talk about Exchange configuration:
http://support.microsoft.com/kb/325921/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello, what is the advantage you get when you create additional UPN
> suffixes. Let's say that for example I have a child domain
> north.test.com and I create a user with the UPN suffix of test.com The
> user will still be created in the child domain and not in the parent
> domain right ?
>
> Thank you
>
> http://forums.techarena.in
>
Re: UPN suffix what is the real benefit [message #160473 is a reply to message #160466] Sat, 29 August 2009 06:16 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
In addition to the user convenience mentioned by Meinolf, using forest-wide
UPN suffixes simplifies suffix routing between forests and provide you with
ability to separate naming convention from your forest hierarchy (which
provides flexibility and security benefits)...

hth
Marcin

"aconti" <aconti.3xnzvd@DoNotSpam.com> wrote in message
news:aconti.3xnzvd@DoNotSpam.com...
>
> Hello, what is the advantage you get when you create additional UPN
> suffixes. Let's say that for example I have a child domain
> north.test.com and I create a user with the UPN suffix of test.com The
> user will still be created in the child domain and not in the parent
> domain right ?
>
> Thank you
>
>
> --
> aconti
> ------------------------------------------------------------ ------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1238972.htm
>
> http://forums.techarena.in
>
Re: UPN suffix what is the real benefit [message #160476 is a reply to message #160473] Sun, 30 August 2009 02:03 Go to previous messageGo to next message
aconti  is currently offline aconti  United States
Messages: 113
Registered: August 2009
Senior Member
When I specify a UPN suffix can I choose whatever I want like
user@office or the name after the @ sign has to be part of the real
domain that I have in the forest. In case I choose to add users I can
therefore add them with the UPN suffix and every user in the forest will
have the same name appended to his username right ?


--
aconti
------------------------------------------------------------ ------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1238972.htm

http://forums.techarena.in
Re: UPN suffix what is the real benefit [message #160480 is a reply to message #160476] Sun, 30 August 2009 07:22 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

aconti schrieb:
> When I specify a UPN suffix can I choose whatever I want like
> user@office or the name after the @ sign has to be part of the real
> domain that I have in the forest. In case I choose to add users I can
> therefore add them with the UPN suffix and every user in the forest will
> have the same name appended to his username right ?

You can basically choose anything you want although I'd choose something
users can relate to. It doesn't make much sense to log them in as
jeffb@mickymouseclub.com if you're selling vehicles.

Also, if you're configuring multiple UPNs for the forest, you'll need to
define what UPN a user's got to use for her logon. You can do that at
the "Account" tab in a user account's "Properties" dialog. There's a
drop down list for that. You can either use one UPN for all users or
have groups of users (or every single user) have different UPNs.

Note that for a mass UPN change, you can easily script it. The attribute
can be written just as any other attribute in the directory. You're
looking for "userPrincipleName". Be sure to type the UPN correctly in
the script, when scripting, your UPN choices aren't limited to the UPNs
configured for the forest as is if you're on the GUI - you can use any
UPN you want.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: UPN suffix what is the real benefit [message #160481 is a reply to message #160480] Sun, 30 August 2009 07:37 Go to previous message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Florian Frommherz [MVP] schrieb:
> You can basically choose anything you want although I'd choose something
> users can relate to. It doesn't make much sense to log them in as
> jeffb@mickymouseclub.com if you're selling vehicles.

Take that statement as: either choose your domain name or the domain
name of the root domain. Make "sales.mycompany.com" be "mycompany.com"
to leave the "sales" out. I'd keep that as easy as possible if people
are supposed to remember and actively use the UPNs.

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Previous Topic:Password change / lockout taking too long to replicate to second s
Next Topic:How can I move the user accounts in between 2 child domain?
Goto Forum:
  


Current Time: Fri Jan 19 00:43:06 MST 2018

Total time taken to generate the page: 0.02802 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software