Home Library Learn Downloads Support Community
Sign in | United States - English | |
5 out of 12 rated this helpful - Rate this topic

User-Principal-Name attribute

Applies to: desktop apps only

This attribute contains the UPN that is an Internet-style login name for a user based on the Internet standard RFC 822. The UPN is shorter than the distinguished name and easier to remember. By convention, this should map to the user email name. The value set for this attribute is equal to the length of the user's ID and the domain name. For more information about this attribute, see the Naming Properties topic in the Active Directory guide.

CNUser-Principal-Name
Ldap-Display-NameuserPrincipalName
Size-
Update PrivilegeDomain administrator or account owner.
Update FrequencyIn theory this should never change.
Attribute-Id1.2.840.113556.1.4.656
System-Id-Guid28630ebb-41d5-11d1-a9c1-0000f80367c1
Syntax String(Unicode)

Implementations

Windows 2000 Server

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in User

Windows Server 2003

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in User

ADAM

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in-

Windows Server 2003 R2

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in User

Windows Server 2008

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in User

Windows Server 2008 R2

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in User

Windows Server 8 Beta

Link-Id-
MAPI-Id-
System-OnlyFalse
Is-Single-ValuedTrue
Is IndexedTrue
In Global CatalogTrue
NT-Security-DescriptorO:BAG:BAD:S:
Range-Lower-
Range-Upper-
Search-Flags0x00000001
System-Flags0x00000012
Classes used in User

Remarks

In ADAM, this attribute is not required to be in the Internet standard RFC 822 format; it can be a simple name.

 

 

Send comments about this topic to Microsoft

Build date: 2/3/2012

Did you find this helpful?
(1500 characters remaining)
Community Content Add
Annotations FAQ
A much better attribute to use than uid
As uPN requires specific formatting (ala RFC 822), it would seem to be a much better choice for standards adherence than uid. uid will take any unicode value, which has the potential to introduce unwanted results when standardizing on it for directory user name.
History
UPN Format

UPN format is described in RFC 822 (obsoleted by RFC 2822)

Snippet from section 6. Address Specification

     addr-spec   =  local-part "@" domain        ; global address
     local-part  =  word *("." word)             ; uninterpreted
                                                 ; case-preserved
     domain      =  sub-domain *("." sub-domain)
     sub-domain  =  domain-ref / domain-literal
     domain-ref  =  atom                         ; symbolic reference


example

  

  admin@mydomain.org
History