none
New user creation policy

    Question

  • I want to change the default login from lastname,firstinitial to firstinitial,lastname when creating a new user account. I can't remember where these default settings are located and how to access and modify. I'd prefer not to use a script, I'd like to see it in a GUI setting. Where can I find it?
    Thursday, March 23, 2017 4:45 PM

All replies

  • Hi

     Check these;

    Create a New User Account

    https://technet.microsoft.com/en-us/library/cc732336(v=ws.11).aspx

    and you can modify "sAMAccountName" attribute in ADSIEdit;

    https://msdn.microsoft.com/en-us/library/windows/desktop/ms679635(v=vs.85).aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thursday, March 23, 2017 5:54 PM
  • Commas are not allowed in sAMAccountName values (the pre-Windows 2000 logon name), so I don't know what attribute to intend to modify. If you mean the common name of the user (the Relative Distinguished Name or RDN), there are no restrictions except maximum length 64 characters. But you cannot logon with the RDN. If you mean the userPrincipalName, that is generally in the form of an email address, which also does not have commas.

    Most likely you mean the RDN (called the Name in ADUC) of the user, in which case you can script to modify the Name property of users, perhaps based on the first and last names of users (if these fields are populated with values for all users). Or a script can read the existing common name and reverse the names before and after the comma.

    Edit: I should add that for many attributes you can use a template when you create new users, which will automatically assign the values you want. For example this link shows how:

    http://www.rebeladmin.com/2014/07/create-users-with-user-templates-in-ad/

    But this assigns the same values to all new users, so it cannot be used to assign names. In your case only a script can automate the process, either to switch names before and after a comma in the common name, or assign values based on already assigned FirstName and LastName fields.

    In case you do want to modify sAMAccountNames, I have a script here that does that in bulk, perhaps based on a function of other attribute values (lke FirstName and LastName):

    https://gallery.technet.microsoft.com/Update-sAMAccountNames-of-7d50f9c2

    This script demonstrates the many things that should be checked when you make changes like this in bulk.


    Richard Mueller - MVP Enterprise Mobility (Identity and Access)


    Thursday, March 23, 2017 7:07 PM
  • If you want to have custom user creation rules with a GUI instead of a script, there are third party tools that let you a) provision users through a customizable GUI b) define custom rules, such as generation of fields, as well as other provisioning procedures. 

    Have a look at this: http://www.adaxes.com/active-directory_provisioning.htm

    Friday, March 24, 2017 8:24 AM
  • Hi,

    Just checking in to see if the information provided was helpful. And if the replies as above are helpful, we would appreciate you to mark them as answers, please let us know if you would like further assistance.

    Best Regards,

    Wendy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, March 31, 2017 9:23 AM
    Moderator
  • Refer https://technet.microsoft.com/en-us/library/aa998290(v=exchg.80).aspx

    Please do test this in your test lab before implementing in production. 

    Regards,

    Bijith

    Friday, March 31, 2017 9:57 AM