A. The sAMAccountName attribute of an object must be unique for the domain, not the entire forest (each domain has an Administrator account Smile ). However, as a best practice, you should avoid having duplicate sAMAccountName values across your forests to avoid the possibility of modifying the wrong instance.