Universal Principal Names

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Would I be correct in saying the only real reason for using this is;

1) If the domain controller someone is logging on to isn't a GC and is using Cached credential mode.

2) If the name of the domain is long winded and therefore can be abbreviated to something else, or is different to the domain name of the Exchange mailboxes.

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

sounds about right to me.

at work we encourage logging on using full upn's, since apparently this encourages the machine to authenticate to the fastest DC and provides a faster login, although im not entirely sure how accurate this actually is.

Fergal

 

Fergal,

ah, that's an interesting point, thanks.

 

Note that the accuracy of this can vary as on occasion I have seen a client authenticate via a GC over a WAN link.

Note that in Windows Server the option to log on without using a local GC is mainly meant for offices without a local Exchange server.