Alexandre Michel
asked on
How to change the UPN set by default to new users in Windows 2012 R2
Hi Experts
1. I created a new DC
2. I decided to name it company.local
3. I now realise that I should have called it company.com to get it ready for future Azure integration
4. I added company.com as an Alternative UPN suffix in Active Directory Domains & Trusts
5. I now want to make sure that all new users created in the AD get the new UPN by default (without having to manually change it when adding the new object)
How can this be done?
* I went to Active Directory Users & Computers, right-click an OU, and in Attribute Editor, changed the value of uPNSuffixes to company.com. That does not seem to set this as a default value.
Alexandre
1. I created a new DC
2. I decided to name it company.local
3. I now realise that I should have called it company.com to get it ready for future Azure integration
4. I added company.com as an Alternative UPN suffix in Active Directory Domains & Trusts
5. I now want to make sure that all new users created in the AD get the new UPN by default (without having to manually change it when adding the new object)
How can this be done?
* I went to Active Directory Users & Computers, right-click an OU, and in Attribute Editor, changed the value of uPNSuffixes to company.com. That does not seem to set this as a default value.
Alexandre
I do not think you are wrong for naming it .local. This is only for internal use and helps you segment the public from the private. Adding the UPN Suffix is the proper way of dealing with this in my opinion.
I had to do the same thing when I introduced O365 to the mix and it works fine.
The link posted for buck changing the UPN using powershell is the easiest way to accomplish this. It will also get you thinking of using scripts to do other mass changes or management in your AD.
Good luck
I had to do the same thing when I introduced O365 to the mix and it works fine.
The link posted for buck changing the UPN using powershell is the easiest way to accomplish this. It will also get you thinking of using scripts to do other mass changes or management in your AD.
Good luck
ASKER
@Pune Tech. Thanks for that. I found this powershell script too and used it. What it does is changing the UPN for EXISTING objects in the AD (though at the end I had to use a slightly different one of the -SearchBase switch wasn't accepted).
Anyway, the question I was asking is about setting the default UPN of NEW object, so that when a user is created, it is automaticallt assigned the new company.com UPN rather than the company.local UPN which then has to be manually changed (easy enough to do, I just want to make is seamless).
Any suggestions?
Anyway, the question I was asking is about setting the default UPN of NEW object, so that when a user is created, it is automaticallt assigned the new company.com UPN rather than the company.local UPN which then has to be manually changed (easy enough to do, I just want to make is seamless).
Any suggestions?
I will only speculate, but that would be a domain name change if you want to do that.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Here is a reason to use scripting to create users and you can template the scripts to automate group membership.
With scripting, you can control the UPN being used.
With scripting, you can control the UPN being used.
ASKER
Thanks everyone for commenting. Most answers were confirming that it is not possible to automatically set the domain using the GUI . Sigh.
https://blogs.technet.microsoft.com/canitpro/2015/07/07/step-by-step-changing-the-upn-suffix-for-an-entire-domain-via-powershell/