Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Pourquoi a et o dans samAccountName peuvent-ils être remplacés par les caractères danois å et ø ?

ayi

A coworker juste demonstrated to me that accounts in our test AD was able to authenticate quand replacing chaque a character in leur samAccountName avec Danish character å (ASCII 134 / å).

E.g. le user <domain>\aaa can authenticate as ååå.

J'ai essayé reproducing this in a freshly provisioned W2K12R2 AD (single server, tous standard values), et it works there too. I created an account aaa (never touching le letter å in le process, so that nothing contains å) et ran:

PS C:\Users\Administrator> runas /user:ååå notepad
Enter the password for ååå:
Attempting to start notepad as user "DEV-DLI\ååå" ...
PS C:\Users\Administrator>

which caused notepad to start, running as aaa.

The même seems to hold true for o et Danish character ø, tandis que le dernier Danish special char æ does pas seem to correspond to tout autre character. With user aaa in AD, trying to créez un user avec samAccountName ååå will fail, informing you that The user logon name you have chosen is already in use (...).

J'ai googled like a madman, mais have been unable to find out what is going on. Does anyone have tout hints as to why this works?

ayi

Ceci est by design. In short, Active Directory maps le accented/diacritical characters to leur "simple" form. Please see le suivant Microsoft Support article.

Windows logon behavior if your user name contains characters that have accents or other diacritical marks (Dead link) (Live version archived here):

If votre user name in le Active Directory directory service contains one ou more characters that have accents ou autre diacritical marks, you may find that you do pas have to use le diacritical mark as you type votre user name to log on to Windows. Vous pouvez log on by using le simple form of le character ou characters. Par exemple, si votre user name in Active Directory is jésush, you can type jesush in le User name box in le Log On to Windows dialog box to log on to Windows.

This behavior occurs so that in situations quand you have to log on to Windows depuis a computer où le preferred keyboard mapping is pas installed, you can encore log on to Windows by using votre user name sans le diacritical marks.