2. For AD, should I use the ADSIEdit tool to change the user object CN to the new name?
3. Should I change the FQDN of the user object of the user to the new name? (Win2k AD about to be migrated to Win2k3 in 30 days).
I was able to get the user SID from the User2SID a tool at http://www.jsiinc.com/SUBB/tip0500/rh0519.htm
This MS article states you can change the following items but doesn't mention the account logon name.
A. Display Name: Change the user account's Display Name in Active Directory Users And Computers.
B. User Profile Path: Change the Profile Path in Active Directory Users And Computers, and then rename the corresponding directory on disk.
C. Logon Script Name: If you use individual logon scripts for each user, change the Logon Script Name in Active Directory Users And Computers, and then rename the logon script on disk.
D. Home Directory: Change the home directory path in Active Directory Users And Computers, and then rename the corresponding directory on disk.
2. No, just use AD User and Computers. It's not worth the time and effort to use a command line tool to change one user account.
3. No, just change the user visible stat's through AD Users and Computers. AD sees the account as a SID anyway.
A. Yeah, do this.
B. Yep, do this too if necessary.
C. Yes, maybe; are you even using logon scripts?
D. Yes, important too! All of these things are done through AD Users and Computers other than renaming the folders on the network shared drives.
This was first published in July 2004