Generation of the sAMAccountName
When a new account is created, a sAMAccountName is automatically generated, which has a maximum length of 20 characters.
You can choose between two generation rules for generating the sAMAccountName:
Variant 1: A combination of prefix and a unique number
Variant 2: A combination of first and last name
With this variant, a maximum of nine persons with the same first and last name can currently be managed.
The generation rule defined here is used for internal and external accounts. The generation of the sAMAccountName for privileged accounts is defined separately.
System default: Variant 1 (prefix: A, length of the unique number: 10)
You can also decide whether the sAMAccountName of an internal employee's Active Directory accounts should also be changed automatically when their name is changed.
The option Change sAMAccountName on name change applies to the account types Internal Account and Privileged Account for which variant 2 is selected as the generation rule for the sAMAccountName.
System default: activated
In the Change menu, click on the action .
If this is not displayed in the menu, click on
and select the action there.The asset list opens. For performance reasons, this is empty the first time it is opened after starting KYDSO.
Search for the article Account name generation and click on the corresponding .
The current settings are displayed in the Information section.
By clicking on
, you can change the variant and activate or deactivate the option for the change.The wizard for the selected action starts and guides you through the process.
If variant 1 is selected, you can define the prefix and the length of the unique number yourself:
Click on
.The wizard for the selected action starts and guides you through the process.
Combination of prefix and a unique number
You define the prefix and the length of the unique number from which the sAMAccountName is generated.
The prefix is optional.
The value A is predefined by the system and can be changed or removed by you.
The following characters are not allowed:
"/ \ [ ] : ; | = , + * ? < >
The value 10 is preset by the system for the length of the unique number and can be changed by you.
Both values may be a maximum of 19 characters long. Make sure you do not exceed the permitted total length of 20 characters.
Example: A141465249
Notice
If the permitted total length is exceeded, the system automatically corrects the configuration by reducing the length of the number. A corresponding correction note appears in the order item for the change to the generation rule.
Combination of first and last name
The sAMAccountName is automatically generated from the first and last name with a maximum total length of 19 characters.
The names are normalized, i.e. all umlauts and accents are replaced (e.g. ä→a, é→e)
A counter from 1-9 is added for duplicates.
Examples: heinz.mueller1, heinz.mueller2, j.bergdorfhollenzo
Notice
If the total permitted length is exceeded, the system shortens the generated sAMAccountName, giving priority to preserving the last name.