24 May 2007

AD account Distinguishedname (full name) escaped with a "\"

I just ran into a strange thing, having an account with a distinguished name looking like : CN=LLAMOSI\, Faust, OU=XXXX,DC=mydomain,dc=local:

The mistake come from the full name which has a ",". Only the Display name may have it.

You cannot edit the distinguished name attribute with adsiedit.msc, because it is owned by "SYSTEM".

Thanks to Brandon Aiken for hitting the coma on the ActiveDir mailing list

1 comment:

Anonymous said...

Hello Brian,

I have had a similar issue where i had to modify an attribute that was own by the system. I do not recall, but i used LDP to modify the attribute and it worked.