To illustrate, I'll create a new logon namespace, separate from the domain name, for users in a division of a company. Let's say that you want the users in Division A to be able to log on as userX@divisionA.com, even though that division has an awful legacy domain nameNTSHMINTthat's a holdover from Windows NT days. The first step is to add the DivisionA.com namespace as a UPN suffix to your AD forest. Open the MMC Active Directory Domains and Trusts console, right-click Active Directory Domains and Trusts, and select Properties. At the resulting dialog box, which Figure 3 shows, you can add one or more UPN suffixes. You must keep UPN suffixes short if you want UPNs to match users' pre-Windows 2000 logon names because pre-Win2K names are limited to 20 characters. If your logon names are 8 characters and the at symbol (@) is 1 character, you have only 11 characters for the UPN suffix, including the .com (or .edu or .org) extension. UPN suffixes are case insensitive. . . .
Anonymous User December 15, 2004 (Article Rating: