asked on

Alternative UPN suffixes in a Microsoft AD inside AWS

Hi

We have created a Microsoft Domain inside Amazon AWS.

We put aws.ourdomain.com as our primary domain.

So we can get the username & passwords to sync with office 365 easily we want to add an alternative UPN suffix of ourdomain.com so our logons can be <username>@ourdomain.com instead of <username>@aws.ourdomain.com

Because your admin account is only domain admin and not enterprise admin you can not currently add this yourself.

AWS state they are working on it as a native feature feature, but no eta.

Has anyone else experienced this problem and come up with a solution other than building the domain name with just the root domain name?

Thanks in advance
Paul

Vasil Michev (MVP)

Dont have much experience with AWS, so I'd take their word for it. But if needed you can always change the UPN directly in O365 via:

Set-MsolUserPrincipalName -UserPrincipalName user@domain.com -NewUserPrincipalName user@newdomain.com

Open in new window

This will work for synced users as well, as long as you have newdomain.com verified in O365.

Sushil Sonawane

Please refer below link to create alternate UPN Suffix this might be help you out.

https://technet.microsoft.com/en-us/library/cc772007(v=ws.11).aspx

http://www.rebeladmin.com/2015/01/how-to-configure-multiple-user-principal-name-upn-suffixes/

http://www.tutorialspoint.com/articles/adding-alternate-upn-suffix-to-active-directory-domain

ASKER CERTIFIED SOLUTION

Narender Gakka

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Paul Batchelder

ASKER

Hi All,

As stated; to solve my problem building our own AD on our own servers inside AWS is the answer rather than using a AWS hosted AD.

Thanks all.
Paul

Paul Batchelder

ASKER

Refer my last post entry.