Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I've just created a simple AD on our Windows 2008 r2 server. I've added a few employees into that directory.

Now, is it possible to create some aliases for a single account.

eg.

name = foo.bar@contoso.internal / contoso\foo.bar

but the user can also log in as

contoso\pewpew

Is this possible?

share|improve this question
3  
Not posting as an answer because I'm not 100% sure, but I am 95% sure that Active Directory does not support aliases for AD logins. –  Mark Henderson Mar 30 '11 at 4:06
    
Thanks for all the answers, folks. That said, I'm absolutely FLOORED that AD doesn't allow this WTF?! Sorry to be so rude, but I'm so upset :( Something so simple, yet overlooked (or probably considered a security issue .. but one I would have been happy to accept). massive sigh –  Pure.Krome Mar 30 '11 at 23:14
    
How many LDAP or other centralized authentication schemes have you worked with that had this? –  mfinni Mar 31 '11 at 0:09
    
And what's your need for this? You can delegate and assign rights and do all kinds of flexible things; under what circumstance would you need multiple valid usernames for a single account? –  mfinni Mar 31 '11 at 14:38
    
@mfinni - generally to authenticate (log in) to a system. eg. we have the policy of firstname.surname@foo.intenal. But of course, some people don't want to log in with their long verbose name, so if we could add an alias, then it would be easier and quicker. Secondly, we occasioanlly have to log into a system or service using another account's credentials. So this would be another quicker way for us to trouble shoot. –  Pure.Krome Apr 8 '11 at 4:25

3 Answers 3

up vote 5 down vote accepted

Mark's right, to the best of my knowledge. You can login with your SAM username in your domain, and you can login with your UPN. You've already identified those in your question. There's nothing that I've ever read that indicates any support for additional username formats or aliases.

share|improve this answer

Mark and mfinni are both correct, the only type alias truly come into play in MS environments is for MS Exchange, Outlook Web Access, and MS Office Communicator, as these technologies allow users to log into their email accounts in OWA/webmail via their email/exchange alias if one is configured.

share|improve this answer

While I don't think it's possible to have multiple aliases or user logon names, it certainly is possible to have multiple User Principal Names (suffixes to be precise), so a user could have a UPN of johndoe@domain.com and johndoe@domain.net. Only one can be used though, not both as far as I know.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.