Link to home
Start Free TrialLog in
Avatar of jskfan
jskfanFlag for Cyprus

asked on

Rename Active Directory Account

Rename Active Directory Account

When renaming AD account, what are things that can be impacted? for instance if I have folder NTFS permissions assigned to the AD account that has been later renamed.

Thanks
ASKER CERTIFIED SOLUTION
Avatar of Sajid Shaik M
Sajid Shaik M
Flag of Saudi Arabia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
In a well designed AD-integrated app, nothing is impacted.  Everything is set by internal security identifiers that don't change and aren't tied to the account name.

Caveat is "well designed."  I have seen apps tie to UPN or email address and those links can break if the app has no way to reconcile changes.  As that is a per-vendor/per-app scenario though. An expert here can't predict what might break in your environment.

No built-in Microsoft role, nor anybproxutrs I am aware of, have an issue though. All use a separate hidden ID field of some sort. Even AADConnect uses an immutable ID that is stamped during creation or when a soft match is made so changes after a match are synced.
No matter you change what properties of user object as user SID did not change at all and permissions are actually get configured on user SID
When renaming AD account, what are things that can be impacted? for instance if I have folder NTFS permissions assigned to the AD account that has been later renamed.
Anything that used %username% variable, for example, script and map drives.

Also, profile folders will not match the username anymore
yes, but access will remains as is, it will not change even foldername and username miss match

Also assuming these are rare cases, you may rename profile folder name under registry to suit new username
Avatar of jskfan

ASKER

Thank you Guys
Also assuming these are rare cases, you may rename profile folder name under registry to suit new username
No, you cannot. It will break inter-profile shortcuts