Max number of UPN suffixes 2008 R2 Forest

is there upper limit number of alternate upn suffixes can defined @ forest root of windows 2008 r2 native active directory? read somewhere windows 2000 forest limit = 863, windows 2003 forest limit = 1300. reason asking looking setting new forest extranet authentication logon email address (samaccountname not accept "@")- numbers have higher this. have seen possible setup upn suffixes on ous forest root level - not sure if helps (extends max perhaps)? if there still max number in 2008, still necessary have upn suffixes defined. ie., can script around it, or system mandatory? in case, single domain forest no trusts. thankyou.

howdie!

 

am 21.12.2010 19:34, schrieb richard_r10000:

> there upper limit number of alternate upn suffixes can

> defined @ forest root of windows 2008 r2 native active

> directory? read somewhere windows 2000 forest limit = 863,

> windows 2003 forest limit = 1300. reason asking looking

> setting new forest extranet authentication logon

> email address (samaccountname not accept "@")- numbers

> have higher this. have seen possible setup

> upn suffixes on ous forest root level - not sure if that

> helps (extends max perhaps)? if there still max number in 2008,

> still necessary have upn suffixes defined. ie., can script

> around it, or system mandatory? in case, single

> domain forest no trusts. thankyou.

 

other defining upn suffixes forest, might want

to hard-write attribute on every user. userprincipalname

attribute takes pretty feed with. that'll work

without first creating upns forest-wide.

 

other that, looks you're trying add external partners to

your ad -- or why it, you'll want mailaddresses the

samaccountname? have specific reason? if elaborate a

little on this, may have different option (probably more feasible)

for you.

 

have checked ad fs -- if you're messing federation of users of

different forests/locations?

 

cheers,

florian

 

---

views , opinions expressed in postings not correlate ones of friends, family or employer.

Windows Server  >  Directory Services