Thanks Brian. While I will certainly do a ton of investigating and lab it first I am pretty confident all our apps (which are few) that do this use samaccountname.
From: Brian Desmond [mailto:[email protected]] Sent: Monday, February 06, 2012 1:57 PM To: NT System Admin Issues Subject: RE: CN format question Any application going against AD could be configured to use it, potentially. >From a pure AD perspective, the value is entirely insignificant beyond needing >to be unique within the parent container/OU. Thanks, Brian Desmond [email protected]<mailto:[email protected]> w - 312.625.1438 | c - 312.731.3132 From: Kennedy, Jim [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Monday, February 06, 2012 11:38 AM To: NT System Admin Issues Subject: RE: CN format question I know this is an impossible question to answer without knowing everything we have here, but what are the ramifications of changing them. Look pretty easy and straightforward to do it. I don't mind fixing this app for these people if it doesn't burn me. What else would be looking at that CN? From: Miller Bonnie L. [mailto:[email protected]] Sent: Friday, February 03, 2012 3:02 PM To: NT System Admin Issues Subject: RE: CN format question IIRC, we had commas in our names too after our migration up from Winnt4 to Windows 2000. Because of some of the display issues (and because we only had a small number of staff on NT-based platforms at the time), we renamed everything to take out the commas and standardize. Otherwise, our cns would look about the same as yours, with my last name then first, but we also have middle initials. If I understand correctly, the cn is just reflecting the name on the object. You don't even really have to have a first/last name combo-it could be "elmo", if that was the name of the object. What would the app do then? From: Kennedy, Jim [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Friday, February 03, 2012 11:17 AM To: NT System Admin Issues Subject: RE: CN format question Thanks Bonnie, that was my feeling also. I too feel it is an app issue, but wanted to get some opinions since I am fuzzy on this. The issue isn't the \, they are choking on my lastname then firstname. They are looking for FirstName first. I would be shocked that they cannot accommodate my way. Can't imagine my way is 'wrong'. It was just a choice someone made here before my time. From: Miller Bonnie L. [mailto:[email protected]] Sent: Friday, February 03, 2012 2:01 PM To: NT System Admin Issues Subject: RE: CN format question The part you've shown us looks normal to me for Microsoft AD. The \ is there to escape the comma that follows. Maybe their app can't deal with that? http://www.informit.com/articles/article.aspx?p=101405&seqNum=7 From: Kennedy, Jim [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Friday, February 03, 2012 10:09 AM To: NT System Admin Issues Subject: CN format question Having an issue with a vendor with some LDAP lookups. I certainly saw this years ago, but never looked into it. Our CN's are backwards from how most people do it I think. Is there anything wrong with it being this way? Why is that \ there? CN=Kennedy\, Jim,OU=(Redacted list of OU/DC's) ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
