Naming users in AD and Exchange
Posted on 2007-11-19
I was wondering of the related best practises in the areas of user naming convention within Windows/Exchange 2003 environment.
The concern arose from the fact that most of the times, users email listing appears in Intranet websites if not Internet and also, I have seen at most places, that user's login names and exchange email IDs are the same, giving rise to a security concern that with Email ID list readily available on the Intranet, we are 50% nearer to cracking the password of the user, if his/her login ID corresponds to Email ID.
Your thoughts in this regards?