Active Directory Administration Cookbook

How it works...

When you create a user object, some fields are automatically populated and many settings are default settings, including the User must change password at next logon setting. These settings are recommended but can be changed after creating a user, either in the user interface or through commands.

A descriptive name for every user object is mandatory to make sure the user object can be identified in the graphical interface and in auditing scenarios. Many applications, including Microsoft Exchange Server, use the first, last, and/or full name to create their own default attributes and settings.

When you create a user object, the object consumes a relative identifier (RID) and Distinguished Name Tag (DNT) in the domain partition. ...