I have another question open, in regards to updating user account information in a Win 2008 environment, but I believe it will not work until I add some necessary attributes. Most users on our AD network were imported with the bare minimum of attributes configured. I need to add the full UPN in the Account settings tab (see screen shot). At this time, only the [pre-windows-2000] info is present. This is a federated domain and setting the UPN suffix is easily done via user properties, but I also need the logon name field populated for about 1500 users.