New Friend (or an Old Friend who Built a New Account)
Registered: 1452043080 Posts: 77
Reply with quote #1
I've done this more than once but was asked to verify...
1. Adding an UPN suffix in Active Directory Domains and Trusts changes nothing (for users, and general functionality) until you make that suffix the primary suffix for users in their user properties (in ADUC). 2. The "pre-Windows 2000" user logon name will remain a logon option. 3. This is all reversible. We can change users back to the default UPN suffix and remove the alternative UPN suffix (if for some reason (?) we wanted to do so). Does that all sound correct? Thanks in advance!
Registered: 1451592353 Posts: 255
Reply with quote #2
re 1. yes, as long as this suffix is not being used in one of the trusted or trusting forests. re 2. yes re 3. yes __________________ Evgenij Smirnov My personal blog (German): http://www.it-pro-berlin.de/ My stuff on PSGallery: https://www.powershellgallery.com/profiles/it-pro-berlin.de/