UPN logon or not?

[Jim]

Are there any advantages (other than cosmetic) to using UPN format
names to logon to a Win2003 domain rather than the "NT style" account
name? The domain functional level is Win2000 mixed and clients are
2000, XP and NT4. At the moment there are a few NT4 BDCs and 2000
domain controllers but they will be retired very soon.

Can anyone point me to a good explanation of the logon and DC location
process that would apply in this environment?

TIA,
Jim

 

[Robbie Allen]

What I like most about using UPNs in a multi-domain forest is that clients
don't need to know which domain they are in.

Here are some good pointers to info on the DC Locator process...

MS KB 314861 - How Domain Controllers Are Located in Windows XP
http://support.microsoft.com/?kbid=314861

MS KB 247811 - How Domain Controllers Are Located in Windows
http://support.microsoft.com/?kbid=247811

Windows & .NET Mag article - Authentication Topology by Gil Kirkpatrick
http://www.winnetmag.com/WindowsServer2003/Index.cfm?ArticleID=37935

Regards,
Robbie Allen
Author of "Active Directory Cookbook" (O'Reilly)
http://www.rallenhome.com/

 

[Herb Martin]

I think (mostly cosmetic) perhaps the biggest advantage is
having everyone in a large company logon using the same
pattern -- of course this only works if you give them the
same "domain part" in the UPN and this requires that
everyone's name be unique across the forest.