UPN suffix what is the real benefit

[aconti]

Hello, what is the advantage you get when you create additional UPN suffixes. Let's say that for example I have a child domain north.test.com and I create a user with the UPN suffix of test.com The user will still be created in the child domain and not in the parent domain right ?

Thank you

[Hockson]

I think that the extra UPN suffix will be able to help users to logon with not so complicated name and then "user@this.is.my.domain.name.in.relver.com", for example "user@relver", if you create an UPN suffix denver. Also check the below microsoft links:

http://technet.microsoft.com/en-us/l...93(WS.10).aspx

http://support.microsoft.com/kb/243280/

Issues occuring on specific configurations:
http://support.microsoft.com/kb/321074/en-us

Exchange configuration:
http://support.microsoft.com/kb/325921/en-us

[Gonzo]

If you use UPN suffixes then it will also simplify suffix routing between forest and provide you with ability to separate naming convention from your forest hierarchy, that will provide flexibility and security benefits as well.

[aconti]

When I specify a UPN suffix can I choose whatever I want like user@office or the name after the @ sign has to be part of the real domain that I have in the forest. In case I choose to add users I can therefore add them with the UPN suffix and every user in the forest will have the same name appended to his username right ?

[Coolestman]

You can try to select anything that you are looking for but still I would select something users can relate to. It will not make much sense to log them in as xyz@someclub.com if you are selling cars or engines. Incase you want to configure multiple UPNs for the forest, then you will have to define what UPN a users for to use for his logon. To do that, just go to the Account tab and in a user account's Properties dialog, you will come across drop down list for that. You have to either use one UPN for all users or have groups of users have different UPNs.

[aconti]

Hello,

ok I understand that it makes life easier if you apply a simpler UPN suffix than specifying all of the child domains but in reality when I logging on how does the system know to which domain controller the user must authenticate if for example I have yp.com/paul and yp.com/brian and paul is a member of marketing.europe.yp.com and brian a member of sales.europe.yp.com. I am trying to understand how it will work in the background....

Thank you