Avatar of jskfan
jskfan
Flag for Cyprus asked on

Rename Active Directory Account

Rename Active Directory Account

When renaming AD account, what are things that can be impacted? for instance if I have folder NTFS permissions assigned to the AD account that has been later renamed.

Thanks
Active DirectoryWindows Server 2003

Avatar of undefined
Last Comment
Shaun Vermaak

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Sajid Shaik M

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Cliff Galiher

In a well designed AD-integrated app, nothing is impacted.  Everything is set by internal security identifiers that don't change and aren't tied to the account name.

Caveat is "well designed."  I have seen apps tie to UPN or email address and those links can break if the app has no way to reconcile changes.  As that is a per-vendor/per-app scenario though. An expert here can't predict what might break in your environment.

No built-in Microsoft role, nor anybproxutrs I am aware of, have an issue though. All use a separate hidden ID field of some sort. Even AADConnect uses an immutable ID that is stamped during creation or when a soft match is made so changes after a match are synced.
Mahesh

No matter you change what properties of user object as user SID did not change at all and permissions are actually get configured on user SID
Shaun Vermaak

When renaming AD account, what are things that can be impacted? for instance if I have folder NTFS permissions assigned to the AD account that has been later renamed.
Anything that used %username% variable, for example, script and map drives.

Also, profile folders will not match the username anymore
Your help has saved me hundreds of hours of internet surfing.
fblack61
Mahesh

yes, but access will remains as is, it will not change even foldername and username miss match

Also assuming these are rare cases, you may rename profile folder name under registry to suit new username
jskfan

ASKER
Thank you Guys
Shaun Vermaak

Also assuming these are rare cases, you may rename profile folder name under registry to suit new username
No, you cannot. It will break inter-profile shortcuts
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.