9

I've just created a simple AD on our Windows 2008 r2 server. I've added a few employees into that directory.

Now, is it possible to create some aliases for a single account.

eg.

name = [email protected] / contoso\foo.bar

but the user can also log in as

contoso\pewpew

Is this possible?

Improve this question
6
  • 4
    Not posting as an answer because I'm not 100% sure, but I am 95% sure that Active Directory does not support aliases for AD logins.
    – Mark Henderson
    Mar 30, 2011 at 4:06
  • 1
    Thanks for all the answers, folks. That said, I'm absolutely FLOORED that AD doesn't allow this WTF?! Sorry to be so rude, but I'm so upset :( Something so simple, yet overlooked (or probably considered a security issue .. but one I would have been happy to accept). massive sigh
    – Pure.Krome
    Mar 30, 2011 at 23:14
  • How many LDAP or other centralized authentication schemes have you worked with that had this?
    – mfinni
    Mar 31, 2011 at 0:09
  • And what's your need for this? You can delegate and assign rights and do all kinds of flexible things; under what circumstance would you need multiple valid usernames for a single account?
    – mfinni
    Mar 31, 2011 at 14:38
  • 1
    @mfinni - generally to authenticate (log in) to a system. eg. we have the policy of [email protected]. But of course, some people don't want to log in with their long verbose name, so if we could add an alias, then it would be easier and quicker. Secondly, we occasioanlly have to log into a system or service using another account's credentials. So this would be another quicker way for us to trouble shoot.
    – Pure.Krome
    Apr 8, 2011 at 4:25

3 Answers 3

Reset to default
7

Mark's right, to the best of my knowledge. You can login with your SAM username in your domain, and you can login with your UPN. You've already identified those in your question. There's nothing that I've ever read that indicates any support for additional username formats or aliases.

Improve this answer
3

Mark and mfinni are both correct, the only type alias truly come into play in MS environments is for MS Exchange, Outlook Web Access, and MS Office Communicator, as these technologies allow users to log into their email accounts in OWA/webmail via their email/exchange alias if one is configured.

Improve this answer
3

While I don't think it's possible to have multiple aliases or user logon names, it certainly is possible to have multiple User Principal Names (suffixes to be precise), so a user could have a UPN of [email protected] and [email protected]. Only one can be used though, not both as far as I know.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .