Directory Name vs Pre 2k Logon Name

[Trammel]

ok, here is a the million dollar question for ya guys! When I copie a template account that I have created. First off, I don't run the AD wizard because we always have to change it to last name, first name. (we are looking at editing the schema for this fix)But this Directory name also fills in the pre windows-2000 login name field as well.
All of our accounts looking at them through Hyena show the majority of users directory name as last name, first name. I went through and renamed all 1800 accounts so that the Directory name was the actualy login name or pre windows-2000 name. Then our Corp site said to make the Directory name the same as the display name. Thats last name, first name. When I do a copy of the template now and put that in the directory name it fills in the pre 2K with that exact info.
Now most of our accounts were migrated to AD. Can someone tell me if the Directory name should be unique? I actualy see duplicates in the directory naming like 2 Smith, Eric. But yet there pre 2K or alias is different. Any information on this would be greatly appriciated.


[This message has been edited by Trammel (edited 07-28-2003).]

[kstanush]

Re: Directory Name vs Pre 2k Logon Name

I am not really sure if the directory name (cn) has to be unique or not. I know that the Pre2K name needs to be unique. If its not, you will get an error. I just now tried to create an account with a diretory name the same as an existing entry and I got a duplicate error.

In theory, what it comes down to is that the directory name is part of the LDAP path to the object:

LDAP://server/CN=XXX,CN=Users,DC=this,DC=that.

In the example above, CN=XXX is the directory name. If you have two objects with the same directory name, there would not be a way to tell them apart when looking at the path. You can, however, ceate an object with the same directory name if its in a different directory OU or container (the path would be different).

I always recommend that directory names be created without punctuation characters, especially commas.

[Trammel]

Re: Directory Name vs Pre 2k Logon Name

Well I take it that Hyena has the copy feature that populates the Pre 2K field with what is typed in to the Directory name for a reason. Can you find out what this reason might be? Also, is there a way to modify Hyena so that it will not populate that information if I need to do so. Thanks

[kstanush]

Re: Directory Name vs Pre 2k Logon Name

We copy the directory name to the Pre2K name because during development, all Hyena users wanted it that way, and the Pre2K field must be filled in to create a Windows 2000 user account. There wasn't any other element to put into that field to fill it. However, if you want something different in the Pre2K field, you can manually enter it during user creation (its on the Account tab). If left blank, it defaults to the directory name field. Or, use a simple/clean format for the directory name like what you might use for the Pre2K name. Or, use the AD user wizard which offers some other alternatives (some people hate the wizard). Remember that Hyena can also display the properties when the wizard finishes so you can almost have the best of both worlds. And in Hyena 5.2 you can also decide if you want Hyena's or MMC's user property pages when managing user accounts.