Article ID: 2656984 - View products that this article applies to.
Microsoft SharePoint does not distinguish between single-byte and double-byte user account names in Japanese.
Consider the following scenario. You have two user accounts:
contoso\testuser01 - hankaku (single-byte character set [SBCS]) and
contoso\ｔｅｓｔｕｓｅｒ０１- zenkaku (double-byte character set [DBCS])You add both accounts to a SharePoint site. In this scenario, the user can log on to the SharePoint site by using either the single-byte or double-byte account name.
SharePoint makes use of the Security Identifier (SID) for determining user permissions. When a user accesses a SharePoint site, SharePoint queries Active Directory for the user credentials, and the SID of the user is returned in the query result.
In the background, Active Directory does not discriminate between single-byte and double-byte user account names in Japanese. Users can log on to a computer as the same user by using either the single-byte or double-byte account name (for instance, contoso\testuser01 or contoso\ｔｅｓｔｕｓｅｒ０１).
Based on the this underlying behavior, users can access SharePoint sites by using either account name as long as appropriate permissions are granted on the sites by using the single-byte or double-byte account name.
SharePoint stores a part of user information, such as logon name, in the content databases in the following situations:
SharePoint uses the LookupAccountSid function to extract user information, including the SID. This function caches the result of the process so that it caches two-byte user account name and the SID if a double-byte account name is used in querying Active Directory. Therefore, SharePoint stores the user information, including the double-byte user account name in the content database.
In this situation, users might see their user names displayed in double-byte characters, but it does not affect their access to the sites.
Japanese has various kinds of characters including zenkaku (全角), full-width characters, and hankaku (半角), half-width characters. These characters look similar and have the same meaning, such as Ａ (zenkaku) and A (hankaku), but their Unicode values are different. Active Directory does not distinguish between them.
The LookupAccountSid Function Returns the Wrong Name After You Rename Accounts: http://support.microsoft.com/kb/329420
[NT] Active Directory で濁音、半濁音、拗音、促音を区別しない (KB only available in Japanese): http://support.microsoft.com/kb/415097/ja
Single-byte Character Sets: http://msdn.microsoft.com/en-us/library/windows/desktop/dd374056(v=vs.85).aspx
Double-byte Character Sets: http://msdn.microsoft.com/en-us/library/windows/desktop/dd317794(v=vs.85).aspx
Double-Byte Character Sets (DBCS) in Windows: http://msdn.microsoft.com/en-us/library/cc194788.aspx
Article ID: 2656984 - Last Review: February 16, 2012 - Revision: 7.0
Contact us for more help