UPN (User Principal Name) Suffixes: You can use Active Directory Domains and Trusts to add user principal name (UPN) suffixes for the existing user account. The default UPN suffix for a user account is the Domain Name System (DNS) domain name of the domain that contains the user account. You can add alternative UPN suffixes to simplify administration and user logon processes by providing a single UPN suffix for all users. The UPN suffix is used only within the Active Directory forest, and it is not required to be a valid DNS domain name.
To perform this procedure, you must be a member of the Domain Admins group or Enterprise Admins group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. For using the appropriate accounts and group memberships, Click here.
To add UPN suffixes
- To open Active Directory Domains and Trusts, click Start, click Administrative Tools, and then click Active Directory Domains and Trusts.
- In the console tree, right-click Active Directory Domains and Trusts, and then click Properties.
- On the UPN Suffixes tab, type an alternative UPN suffix for the forest, and then click Add.
The procedure forusing the Active Directory module for Windows PowerShell. To open the Active Directory module, click Start, click Administrative Tools, and then click Active Directory Module for Windows PowerShell.
Sample AD PowerShell command to update UPNs in bulk
Get-ADUser-Filter * -properties homemdb | where {$_.homemdb -ne $null} | ForEach-Object ($_.SamAccountName) {$CompleteUPN = $_.SamAccountName + “@contoso.com”; Set-ADUser -Identity $_.DistinguishedName -UserPrincipalName $CompleteUPN}
The above script:
· Gets all users with something in their homemdb attribute (i.e. mailbox users)
· Creates a temporary variable called $completeUPN which is a combination of every user’s samaccountname plus @contoso.com
· Sets each user to this new upn
Enjoy!!!
PREMNAIR'S Blog 