Invalid characters for a username.

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

akg414s - 30 Jul 2008 15:51 GMT

I need a list of characters that can't be used for an Active Directory
username.

Thanks

Reply to this Message

Paul Bergson [MVP-DS] - 30 Jul 2008 16:12 GMT

Here you go:
http://support.microsoft.com/kb/909264

Signature

Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

>I need a list of characters that can't be used for an Active Directory
> username.
>
> Thanks

Reply to this Message

Richard Mueller [MVP] - 30 Jul 2008 17:15 GMT

That's a good reference, although it applies mostly to computer objects. I
need to add "\" and "/" to my list of characters not allowed in
sAMAccountName's. However I retested and still am not able to create users
with the charcters "[", "]", ";", "=", or "+" in the sAMAccountName. I have
not tested computer or group objects.

Signature

Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

> Here you go:
> http://support.microsoft.com/kb/909264
[quoted text clipped - 3 lines]
>>
>> Thanks

Reply to this Message

Richard Mueller [MVP] - 30 Jul 2008 16:16 GMT

>I need a list of characters that can't be used for an Active Directory
> username.
>
> Thanks

If you mean the "Pre-Windows 2000 logon name", the following are not
allowed:

[ ] : ; | = + ? < > * "

I'm not aware of any characters that are not allowed in Common Names. The
characters above are allowed. However, if any of the following are used they
must be escaped with the backslash "\" escape character:

, \ # + < > ; " =

In addition if you use ADSI (in scripting for example) the forward slash,
"/", must also be escaped with the backslash. For example, if the Common
Name of a user is "Last, First", then in VBScript you would bind to the
object with code similar to:

Set objUser = GetObject("LDAP://cn=Last\, First,ou=West,dc=MyDomain,dc=com")

Among the characters I have tested and found to be fine in Common Names (and
elsewhere in Distinguished Names, such as the name of an OU):

* ( ) . & - _ [ ] ` ~ | @ $ % ^ & ? : |

Signature

Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

Reply to this Message

Meinolf Weber - 30 Jul 2008 17:34 GMT

Hello akg414s,

Have a look here:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/w2000Msgs/25
86.mspx?mfr=true

http://support.microsoft.com/kb/938447

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I need a list of characters that can't be used for an Active Directory
> username.
>
> Thanks

Reply to this Message

Richard Mueller [MVP] - 30 Jul 2008 18:03 GMT

Per your first reference, I need to add "," to my list of characters not
allowed. Just to be clear, the characters "(" and ")" are allowed, they just
enclose the list of invalid characters. I think the article meant to list /\
instead of \\. Otherwise, the list is good, but omits the characters "[" and
"]". I'm not able to use those. My list of characters not allowed in
sAMAccountName's for users is now:

[ ] : ; | = + ? < > * " / \ ,

All are allowed in common names, although some must be escaped (with "\").

Signature

Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

> Hello akg414s,
>
[quoted text clipped - 15 lines]
>>
>> Thanks

Reply to this Message