To configure a User Logon Name Generation policy
-
On the Policy to Configure page, select User Logon Name Generation, and then click Next.
-
On the User Logon Name (pre-Windows 2000) Generation Rules page, do the following:
-
Click Add, and complete the Configure Value dialog by using the procedure outlined later in this topic, to create a name generation rule.
-
Select a rule and click Remove to delete the rule.
-
Select a rule and click View/Edit to modify the rule.
-
Select a rule and click Up or Down to move the rule higher or lower in the list, in order to give the rule a higher or lower priority, respectively.
-
Click Advanced to set some options that apply to all rules within the policy. Complete the Advanced dialog by using the procedure outlined later in this topic.
-
If you want the logon name to be allowed for manual edit, select Allow manual edits of pre-Windows 2000 logon name. Then, do one of the following:
-
Click Always to authorize the operator who creates or updates the user account to modify the pre-Windows 2000 logon name.
-
Click Only if a unique name cannot be generated by this policy to allow manual changes only in the situation where a policy-generated name is already assigned to a different user account.
-
Click Next.
-
-
-
On the Enforce Policy page, you can specify objects to which this Policy Object is to be applied:
-
Click Add, and use the Select Objects dialog to locate and select the objects you want.
-
-
Click Next, and then click Finish.
To complete the Configure Value dialog
-
Click Add.
-
Configure an entry to include in the value. For more information, see Steps for configuring entries.
-
In the Configure Value dialog, add more entries, delete or edit existing ones, and then click OK.
To complete the Advanced dialog
-
In Maximum length, in characters, set the maximum length of the generated name.
-
Optionally, select Adjust the case of characters to configure case formatting:
-
Click All UPPERCASE to format the name as the uppercase string.
-
Click All lowercase to format the name as the lowercase string.
-
-
Specify the scope in which you want the generated name to be unique:
-
Click Domain to make the name unique within the domain.
-
Click Forest to make the name unique within the forest.
-
Click All managed domains to make the name unique across all managed domains.
-
-
Optionally, in the Restricted characters area, specify the characters you want the policy to remove from the generated name.
The policy always removes the following characters: " @ * + | = \ : ; ? [ ] , < > /
To specify additional characters, type them one by one, without any separator character, in the provided text box.