Office 365 Migration – Adding Additional UPNs

In my previous post office-365-migration-user-attribute-discovery-export-powershell/ I described the importance of matching your user UPN with their primary SMTP Address.

A scenario I recently came across was where the customer didnt have the correct UPN Suffix registered in their Active Directory Forest.

For example, the root domain was contoso.com so all their UPNs were similar to john.doe@contoso.com. They also had some users with a Primary SMTP Address of fabrikam.com but their UPN was still contoso.com

Can I add a UPN to my Forest? Will it destroy things?

Yes. No. The default UPN is created when you birth your Active Directory and it matches the FQDN. Your users can log into domain resources with either their UPN or their SamAccountName. UPN suffixes can be added, by Powershell or the Active Directory Domains and Trusts Snapin.

Adding a UPN Suffix is primarily performed, but not restricted to (see above scenario), for non routable domains (Good MS post here on them) e.g. your domain is contoso.local but you want users to log into resource with john.doe@contoso.com because your verified Office 365 domain is contoso.com. In this scenario you would add contoso.com as a new UPN Suffix in your Active Directory Forest

How do I add a UPN Suffix?

What do we need to do. Lets assume you have no additional UPN Suffixes and want to add fabrikam.com. The account you use for the following commands requires either “Domain Admin” or “Enterprise Admins” membership. Read More

This cmdlet will bring back your current Domain name (and UPN Suffix)

Will return nothing. Lets add fabrikam.com as a UPN suffix to our Active Directory Forest

Did it work? Lets see. Run the Get-ADForest cmdlet again

All things being well you should see your new UPN Suffix fabrikam.com listed.

How do I assign the new UPN Suffix to my users?

The new UPN suffix will be available in the Active Directory Users and Computers Snapin. Edit the user and navigate to the Account tab. The “User Logon Name” is the UPN prefix. The drop down box lists the UPN Suffixes available”. You should see your new UPN Suffix here.

Powershell fanatic? A great resource has been published by MS, head over to https://support.office.com/en-us/article/how-to-prepare-a-non-routable-domain-such-as-local-domain-for-directory-synchronization-e7968303-c234-46c4-b8b0-b5c93c6d57a7

 

Office 365 Migration – Adding Additional UPNs
Rate this post

Leave a comment

Your email address will not be published.

Time limit is exhausted. Please reload CAPTCHA.

 

This site uses Akismet to reduce spam. Learn how your comment data is processed.