User-Principal-Name attribute

This attribute contains the UPN that is an Internet-style login name for a user based on the Internet standard RFC 822. The UPN is shorter than the distinguished name and easier to remember. By convention, this should map to the user email name. The value set for this attribute is equal to the length of the user's ID and the domain name. For more information about this attribute, see User Naming Attributes.

Entry	Value
CN	User-Principal-Name
Ldap-Display-Name	userPrincipalName
Size	-
Update Privilege	Domain administrator or account owner.
Update Frequency	In theory this should never change.
Attribute-Id	1.2.840.113556.1.4.656
System-Id-Guid	28630ebb-41d5-11d1-a9c1-0000f80367c1
Syntax	String(Unicode)

Implementations

• Windows 2000 Server
• Windows Server 2003
• ADAM
• Windows Server 2003 R2
• Windows Server 2008
• Windows Server 2008 R2
• Windows Server 2012

Windows 2000 Server

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	User

Windows Server 2003

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	User

ADAM

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	-

Windows Server 2003 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	User

Windows Server 2008

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	User

Windows Server 2008 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	User

Windows Server 2012

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	True
In Global Catalog	True
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000001
System-Flags	0x00000012
Classes used in	User

Remarks

In ADAM, this attribute is not required to be in the Internet standard RFC 822 format; it can be a simple name.