rename users accounts in Active Directory

Dear All,

We have a policy which required us to rename most of our user accounts in the active directory; we have to rename the login name.
I would like to ask if this is will have any affection for the user’s permissions, email, internet … etc.
we have windows 2008 R2 SP1 active directory.

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

It will effect it from the user's perspective - they'll have to type in a different username. NTFS permissions, Exchange mailboxes, etc won't care because those things are associated with the account's SID; however, its possible there are other 3rd party applications that use the name...
As mentioned above, the users will need to logon with this new name, but changing the logon name shouldn't affect any Active Directory-based permissions, which are SID-based.  3rd party apps that use AD authentication should be ok as well.
Right - 3rd party apps will still be able to authenticate to AD just fine. My concern was any 3rd party apps that might store the AD username - not the SID - internally for some reason - you would need to configure those with the updated information.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

You can certainly rename an AD account as it is often done when someone's name changes or you want to create uniformity inside of your AD.

Assuming you are using Exchange, make sure that the Email Default Address Template is properly configured to use the email address you want to use.  Some people base their email address on the user/logon name; others Alias, and some custom.

This could be a good opportunity to make sure your default email addresses also match your new policy which I assume will be something like first initial last name.

You should also try using a command line prompt to make things go easier:

wmic useraccount where "name='username' " rename new_username

Many other cool command line options to reset passwords, make them change on next logon, etc.

I've had it make a mess out of the email system and the Outlook Profile.  This was after someone got married and their named changed.   Nothing would ever get it acting properly until I renamed the account back to the original name.  After that I never change the spelling of an account,...particularly after it has been in use for a while.  I will change the Display Name but never the actual username.
hirenvmajithiyaManager (System Administration)Commented:
I think changing username will have no effect as they are just logical representation to us. Actual(real) identity of any object in AD is SID. This is going to be the same even if you rename username.

I think changing username will have no effect as they are just logical representation to us. Actual(real) identity of any object in AD is SID. This is going to be the same even if you rename username.

Well, can think that....but I lived it.   I fought with it for a whole day before giving up and renaming the account back again.
It ain't about is about the Fully Qualified Canonical Directory names in AD.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.