Force unique usernames in a forest??

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Is it possible to force unique usernames in the forest versus in each child
domain?

I have an application server that only authenticates based on username but
authenticates against each domain controller (using LDAP). So, if
(e-mail address removed) signs in, he could actually get the same permissions as
(e-mail address removed), since the username "csmith" was correctly identified.
 
1. Fix that app
2. No you can't enforce uniqueness through native mechanisms. You would need to
disable everyone's ability to create/modify user objects and have them go
through some enterprise management tool, either off the shelf or custom made.

joe
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

2 Forest in one network. Not able to connect domain 9
Is it possible to seperate a tree from an existing forest and build up a new one ? 1
Cannot delete domain in an existing forest 0
Identical Usernames In 1 Forest 1
Cross Domain Authentication Issue 1
Strategies for cloning our production AD forest to a "dev" forest ? 2
Delegation to create mail-enabled users 2
How to reduce Forest trust Traffic ? 3

Back
Top