Duplicate 'name' attribute in Active Directory

We have run into an issue where multiple names (e.g., John Smith) appear in the same Organizational Unit in Active Directory.  While other attributes like samaccountname, employeeid and others are unique, we find that Active Directory will not allow for a duplicate 'name' attribute.  Is this because CN derives by name by default?  Or, is there a workaround?

We ponder appending some unique value to the end of name (e.g., John Smith [jsmith01]).  However, I wanted to throw this question out there to see what other feedback I can get.  From what I have read, it seems like while you cannot have duplicate 'name' attribute values in the same Organizational Unit, you can have the same name in Active Directory in another OU.  Mainly, I was just wondering what others have done because I suspect it must be common for large directories with many users in OUs to have similar run ins with multiple John Smith names (or other common names).
CecilAdminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris DentPowerShell DeveloperCommented:
>  Is this because CN derives by name by default?

Yes. Every CN must be unique within the same container to meet the constraint that every Distinguished Name (DN) must be unique.

I'm afraid there's no way around that aside from changing the value for CN (also known as the Relative DN, RDN).

This is a limitation of LDAP rather than something unique to AD.

Whenever I've bumped into this in the past either the givenName is changed to a short version, if applicable. Or a middle initial is inserted, again if applicable.

Chris
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.