Correct. If you are in native mode and can't find a GC and don't have the ignoregcfailures switch set I would say you would have issues anyway. But then I am a proponent of setting the ignoregcfailures switch and not using universal groups for security principals and definitely never using them for denies. Alternatively if you can get away with it, make all DC's GCs.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Adner Sent: Tuesday, July 06, 2004 11:59 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Adding a UPN Suffix Yeah, the generic accounts (Administrator, Guest, etc) would be excluded. I hadn't considered an additional dependency upon GC's. They're somewhat required for all logins anyway. Are you saying a UPN style logon will not work at all if a GC can't be found? > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of joe > Sent: Tuesday, July 06, 2004 22:28 > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Adding a UPN Suffix > > The obvious one that comes to mind is that all user accounts have to > be unique in the first part of the name then... You will have to make > sure that you either specify specific non company.com UPNs for Guest, > krbtgt, administrator, etc or not set those at all. > > Also obviously, dependency on UPNs means dependency on GCs, make sure > you have good coverage. > > > joe > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of David Adner > Sent: Tuesday, July 06, 2004 10:48 PM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] Adding a UPN Suffix > > Are there any gotchas to be aware of when adding a new UPN suffix to a > Forest? > > So, if there's corp.com and child.corp.com, but I want to give > everyone a UPN of @company.com, I know how to add the suffix, but are > there any issues with doing this to all user accounts Forest-wide? > > Thx > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
