Skip to content

HOW TO: Add UPN Suffixes to a Forest

HOW TO: Add UPN Suffixes to a Forest


This article describes how to add UPN suffixes to a forest. Adding these suffixes gives you the ability to use a friendly user-logon name that does not match the domain’s or parent domains’ naming structure.


“You can use Active Directory Domains and Trusts to add user principal name (UPN) suffixes for the existing user account. The default UPN suffix for a user account is the Domain Name System (DNS) domain name of the domain that contains the user account. You can add alternative UPN suffixes to simplify administration and user logon processes by providing a single UPN suffix for all users. The UPN suffix is used only within the Active Directory forest, and it is not required to be a valid DNS domain name.”


Adding a UPN Suffix to a Forest


  1. Open Active Directory Domains and Trusts.

2. Right-click Active Directory Domains and Trusts in the Tree window pane, and then click Properties.


3. On the UPN Suffixes tab, type the new UPN suffix that you would like to add to the forest.

4. Click Add, and then click OK.


Now when you add users to the forest, you can select the new UPN suffix to complete the user’s logon name



Sharing is caring!

Published inActive Directory

One Comment

  1. I’m not sure where you are getting your info, but good topic.
    I needs to spend some time learning more or understanding more.
    Thanks for magnificent information I was looking for this information for my mission.

Leave a Reply

Your email address will not be published.