Training
Module
Create and manage Active Directory objects - Training
This module focuses on the tasks associated with managing Active Directory objects and AD domain services domain controllers.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
This article describes how to change display names of Active Directory (AD) users.
Original KB number: 250455
When a new user is created in Active Directory, the Full name field is always generated in FirstName LastName format. In turn, this field sets the Display Name field on creation, so you end up with a FirstName LastName formatted global address list.
You can make this change by using the Adsiedit utility. Adsiedit not only changes the default way the Display Name field is built, but also the Full Name (that is, the "cn") field, that's why users appear in the chosen format when you look in the Users and Computers snap-in.
Warning
If you use the ADSI (Active Directory Service Interfaces) Edit snap-in, the LDP utility, or any other LDAP (Lightweight Directory Access Protocol) version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.
Insert your Windows 2000 Server CD.
Navigate to the \support\tools
directory.
Double-click on the Support.cab file.
Locate the files adsiedit.msc and adsiedit.dll. Extract them to your %systemroot%\system32
directory.
Run regsvr32 adsiedit.dll.
Start Microsoft Management Console (MMC), and then add the ADSI Edit snap-in.
Right-click the top node, and then select Connect to.
Change the Naming Context to Configuration Container, and then select OK to bind and authenticate.
Expand the Configuration Container node, and then expand the Configuration node.
Expand the cn=DisplaySpecifiers node, and then double-click CN=409.
Note
409 is the Locale ID for U.S. English. If you are in a multi-lingual environment, you may need to make changes to the other codes. Most of the Asian codes are already set.
The International Telecommunication Union (ITU) and International Organization for Standardization (ISO) define the code pages. For more information, visit the ITU Web pages
In the right-hand pane, open the properties for CN=user-Display.
Scroll to the createDialog optional property.
Set the attribute to %<sn>.%<givenName>. Make sure that you select Set.
Note
The only tokens that can be formatted in the dislayName are %<sn>, %<givenName>, and %<initials>.
Select OK to close the dialog box.
In Active Directory Users and Computers, create a new User; the Full Name (and thus, the Display Name) are built in accordance with your rule.
Making these changes can have adverse effects.
Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft doesn't guarantee the accuracy of this third-party contact information.
Training
Module
Create and manage Active Directory objects - Training
This module focuses on the tasks associated with managing Active Directory objects and AD domain services domain controllers.
Documentation
Multiple tabs of user properties are missing - Windows Server
Provides a solution to an issue where multiple tabs are missing when you view user properties in Active Directory Users and Computers.
Can't add user or object to directory service - Windows Server
Describes the problem that may occur when you try to add a user or an object to Active Directory. If the user name or the object name contains certain special German characters, you may receive an error message. A resolution is provided.
DS-Core-Propagation-Data attribute - Win32 apps
The DS-Core-Propagation-Data attribute is for internal use only.