{"id":5558,"date":"2013-07-15T08:32:16","date_gmt":"2013-07-15T16:32:16","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=5558"},"modified":"2022-04-13T14:02:05","modified_gmt":"2022-04-13T21:02:05","slug":"the-strange-way-in-which-active-directory-implements-the-full-name-attribute","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/the-strange-way-in-which-active-directory-implements-the-full-name-attribute\/","title":{"rendered":"The Strange Way in Which Active Directory Implements the Full Name Attribute"},"content":{"rendered":"<p><strong><em>Did you know that the full name, first name, last name, display name, logon name, and Pre-Windows 2000 account name can all be different for a single user account in Active Directory?<\/em><\/strong><\/p>\n<p>There are some things in software products that are implemented in such a bizarre way that I can\u2019t resist writing about them. One such example is the <em>Full Name<\/em> attribute in Active Directory accounts. The way Microsoft implements Full Name is rather interesting. Do not confuse Full Name with Display Name. They are two completely different attributes. By default, the Display Name is a combination of a user\u2019s first and last name. Unlike Display Name, the Full Name attribute is not visible in the graphical user interface (GUI) and cannot be set within the properties of the user account.<\/p>\n<p>Try this. Look at all the properties of a user account closely. You won\u2019t find full name anywhere. Yes, you cannot go to a screen and look at the full name. You will find display name, which is not the name that is displayed in Active Directory Users and Computers. So, what is the actual <em>Display Name<\/em> that is displayed in Active Directory Users and Computers? Well, believe it or not, the actual name that is displayed is the full name. The next obvious question you are going to ask is how do I change the full name if it\u2019s not shown in the GUI? Answer: By right clicking the account and selecting Rename you will notice a pop-up Window that will show you the full name. That\u2019s the only time you will find the screen that shows the full name.<\/p>\n<p>So, let\u2019s summarize what we\u2019ve learned so far. The <em>Full Name<\/em> is by default a combination of a user\u2019s first and last name, but it can be a combination of anything you want, totally unrelated to the actual first or last name. The first name, last name, display name and the full name can be completely independent of each other. You can literally have a first name Bill, last name Gates, display name Steve Ballmer, a logon name Melinda and a full name Brad Smith. Play around with these attributes and you will see what I mean.<\/p>\n<p><a href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/GeneralTab.png\"><img decoding=\"async\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/GeneralTab.png\" alt=\"\" width=\"423\" height=\"468\" \/><\/a><\/p>\n<p>By the way, the logon name of the user and the SAM account name (Pre-Windows 2000 name) can also be completely independent. So, Bill Gates logon name can be Melinda. The logon and Pre-Windows 2000 names are configured on the Account tab of the user account properties.<\/p>\n<p><a href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/AccountsTab.png\"><img decoding=\"async\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/AccountsTab.png\" alt=\"\" width=\"423\" height=\"468\" \/><\/a><\/p>\n<p>As I mentioned earlier, the Display name is not the name that is displayed in the Active Directory Users and Computers. The real display name is \u201cFull Name\u201d, it\u2019s just not called Display name. To display what I call the \u201creal\u201d display name requires that you change the Full Name by right clicking the user account. I changed the Full Name (i.e., Display name) to Brad Smith. So what we have is the following.<\/p>\n<ul>\n<li>Full name (the \u201creal\u201d Display name) = Brad Smith<\/li>\n<li>First name = Bill<\/li>\n<li>Last name = Gates<\/li>\n<li>Display name = Steve Ballmer<\/li>\n<li>User logon name = Melinda<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/FullName.png\"><img decoding=\"async\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/FullName.png\" alt=\"\" width=\"390\" height=\"284\" \/><\/a><\/p>\n<p>Once you rename the user account, the General tab will look like this. Notice that the Display name (Steve Ballmer) is not the name that is displayed in Active Directory Users and Computers and that you are allowed to change the display name so it doesn&#8217;t match with the first name and last name. When you create a new account, the Active Directory creates a display name that is based on the user&#8217;s first name and last name. However, Active Directory doesn&#8217;t have a mechanism to check if the display name is a combination of the first name and last name after the fact. In some situations, this behavior can come handy.<\/p>\n<p><a href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/DisplayName.png\"><img decoding=\"async\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/DisplayName.png\" alt=\"\" width=\"440\" height=\"539\" \/><\/a><\/p>\n<p>I should point out that the Pre-Windows 2000 account can also be changed to a different name. For example, if the logon name contains a period (e.g. Melinda.Gates) and you don\u2019t want a period in the Pre-Windows 2000 account name you can simply remove the period (e.g. MelindaGates). Here\u2019s how the Pre-Windows 2000 account can be different than the standard logon name.<\/p>\n<p><a href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/Pre-Windows2000.png\"><img decoding=\"async\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/Pre-Windows2000.png\" alt=\"\" width=\"422\" height=\"469\" \/><\/a><\/p>\n<p>Obviously, I am not recommending you configure the account in such a manner, I am just pointing out the fact that the <strong>full name, first name, last name, display name, user logon name, and SAM account name can all be different for a single user account in Active Directory<\/strong>. Which is all fine and dandy, but the way the full name and the display name is implemented in Active Directory appears rather strange to me. I am bringing this up because when I am teaching Active Directory classes, my students are often confused about the whole concept of full name versus display name until I explain the non-intuitive way that it is implemented in Active Directory.<\/p>\n<p>The screen shots in this article are from Windows Server 2012 but this implementation is the same in Windows Server 2008, Windows Server 2003 and Windows Server 2000.<\/p>\n<p><span style=\"text-decoration: underline;\">NOTE<\/span>: <em>You can change the display name and configure it in different ways in ADSIEdit using the properties of \u201cCN=user-Display\u201d as described in this <a href=\"http:\/\/support.microsoft.com\/kb\/250455\">KB250455 article<\/a>, but that\u2019s not what I am talking about in this article<\/em>.<\/p>\n<h2><strong>Feedback to Microsoft<\/strong><\/h2>\n<p>There are several issues in the way this concept is implemented and here are my suggestions to Microsoft.<\/p>\n<ul>\n<li>In the Rename User screenshot below, the box <em>Full name<\/em> should be called <strong>Display name<\/strong> because that\u2019s what is actually displayed in the Active Directory Users and Computers.<\/li>\n<\/ul>\n<p style=\"padding-left: 30px;\"><a href=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/FullName.png\"><img decoding=\"async\" src=\"https:\/\/www.zubairalexander.com\/blog\/wp-content\/uploads\/2013\/07\/FullName.png\" alt=\"\" width=\"390\" height=\"284\" \/><\/a><\/p>\n<ul>\n<li>The <em>Display name<\/em> box should be called<strong> Full name<\/strong> and it should directly come from the combination of user\u2019s first name and last name, which is the case by default.<\/li>\n<li>We should not be able to manually change this box, similar to when you create new contacts in Microsoft Exchange, otherwise it is no longer the full name as you can see in the Rename User screenshot above where the name was changed.<\/li>\n<\/ul>\n<h4><strong>Potential Issues<\/strong><\/h4>\n<p>The fact that changing the first and last name doesn\u2019t change the Full Name is known to cause developers some headaches, e.g., issues with sharing of a BCM database. The inconsistency in the way this feature is implemented has also some known issues with Exchange, which were documented in this <a href=\"http:\/\/blogs.msdn.com\/b\/dgoldman\/archive\/2008\/06\/19\/changing-the-display-name-of-active-directory-users.aspx\">MSDN article<\/a>. The biggest challenge that the Active Directory administrators face is the confusion that it causes and in my opinion the order of display name and full name should be swapped, as explained in the previous section.<\/p>\n<hr \/>\n<p><span style=\"font-size: xx-small; font-family: Verdana;\">Copyright \u00a9 2013 SeattlePro Enterprises, LLC. All rights reserved.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Did you know that the full name, first name, last name, display name, logon name, and Pre-Windows 2000 account name can all be different for a single user account in Active Directory? There are some things in software products that are implemented in such a bizarre way that I can\u2019t resist writing about them. One [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[6,43,48,38,30,65],"tags":[],"class_list":["post-5558","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-articles","category-windows-2000","category-windows-2003","category-longhorn-server","category-windows-2012"],"aioseo_notices":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/5558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/comments?post=5558"}],"version-history":[{"count":0,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/posts\/5558\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/media?parent=5558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/categories?post=5558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.zubairalexander.com\/blog\/wp-json\/wp\/v2\/tags?post=5558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}