The default UPN is contained in the Canonical Name attribute on the Partitions container object in the configuration naming context. The default UPN suffix identifies the domain in which the user account is contained. When you create a user account in [easyazon_link identifier=”1787289354″ locale=”US” tag=”wn0d5-20″] Active Directory [/easyazon_link], the default UPN suffix is the DNS name of the first domain in your domain tree.
If you create user accounts by using [easyazon_link identifier=”0134583752″ locale=”US” tag=”wn0d5-20″] Active Directory [/easyazon_link] Users and Computers, every user must have a UPN.
Here is a simple command to list the UPN Suffixes of an AD Forest:
Get-adforest | select UPNSuffixes -ExpandProperty UPNSuffixes