The New User Object creation window has two text fields, one for User logon name and other for User logon name (pre-Windows 2000). What is the difference between these two logon names? What significant role do they play in Active Directory working?
1 Answer
The pre-Windows 2000 logon name is called the SAM Account Name and exists for compatibility with old systems (although it is still used very commonly in modern setups), it has a 20 character limit and works in conjunction with the domain NETBIOS name, in your example, LZ to give the UsernameLZ\username.
The other is the more modern version, has a much higher character limit and combines with the user principal suffix, usually but not necissarily the DNS domain name, in your example, @lz.com to give you the User Principal Name .
Despite similarities, these are not interchangeable and can be completely different.
