We help IT Professionals succeed at work.

Rename Active Directory Account

110 Views
Last Modified: 2019-03-23
Rename Active Directory Account

When renaming AD account, what are things that can be impacted? for instance if I have folder NTFS permissions assigned to the AD account that has been later renamed.

Thanks
Comment
Watch Question

System Admin
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
In a well designed AD-integrated app, nothing is impacted.  Everything is set by internal security identifiers that don't change and aren't tied to the account name.

Caveat is "well designed."  I have seen apps tie to UPN or email address and those links can break if the app has no way to reconcile changes.  As that is a per-vendor/per-app scenario though. An expert here can't predict what might break in your environment.

No built-in Microsoft role, nor anybproxutrs I am aware of, have an issue though. All use a separate hidden ID field of some sort. Even AADConnect uses an immutable ID that is stamped during creation or when a soft match is made so changes after a match are synced.
MaheshArchitect
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
No matter you change what properties of user object as user SID did not change at all and permissions are actually get configured on user SID
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
When renaming AD account, what are things that can be impacted? for instance if I have folder NTFS permissions assigned to the AD account that has been later renamed.
Anything that used %username% variable, for example, script and map drives.

Also, profile folders will not match the username anymore
MaheshArchitect
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
yes, but access will remains as is, it will not change even foldername and username miss match

Also assuming these are rare cases, you may rename profile folder name under registry to suit new username

Author

Commented:
Thank you Guys
Shaun VermaakSenior Consultant
CERTIFIED EXPERT
Awarded 2017
Distinguished Expert 2019

Commented:
Also assuming these are rare cases, you may rename profile folder name under registry to suit new username
No, you cannot. It will break inter-profile shortcuts
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.