Microsoft KB Archive/824194

= UPN Attributes of the Other Users on the Domain Are Displayed in ACL Properties =

PSS ID Number: 824194

Article Last Modified on 8/12/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server

-





SYMPTOMS
When a user who does not belong to the Administrators group logs on to a Windows 2000 domain, clicks the Security tab in the properties of any folder, and then clicks Add, the user may be able to see the userPrincipalName (UPN) attributes, or the logon names, of other users on the domain, and not just the other users' display names.



CAUSE
This behavior occurs because the system requires a unique way to identify each user so that permissions can be granted to the correct user. Although the UPN is guaranteed to be a unique name, more than one user may have the same display name. Therefore, matching strings (for example, matching display names) cannot be used in this scenario to describe different users.



MORE INFORMATION
By default, users can also view the UPN attributes of other users in the Active Directory directory service.

Keywords: kbwinservds kbActiveDirectory kbprb KB824194

Technology: kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.