A downlevel login name is a feature that provides a way of identifying an environment user account without requiring the user to type in a relatively long user name and password. This can be desired in cases where users need to quickly access a resource, but would not necessarily know their full user name and or password. In this way, the user can successfully authenticate quickly and securely.
What Are Downlevel Logon Names?
Downlevel login names are user-friendly aliases that can be created to make it easier to access an environment account. They use the fully qualified domain user name on the backend, so there is no need to change user passwords or any other existing security settings. The downlevel logon name can simply be set up to be used as an easy-to-remember alias or nickname. Different users can also have different aliases as there is no restriction on how many aliases can be assigned to a single user.
What is the Benefit of Having a Downlevel Logon Name?
Having a downlevel logon name can reduce the risk of account lockout due to users not being able to remember the full user name. Users can also quickly access account resources without having to type in a long user name and password. This makes it easier and more secure to access account resources as downlevel logon names are typically shorter than their fully qualified counterparts.
How to Set Up a Downlevel Logon Name?
Setting up a downlevel logon name is relatively straightforward. It is possible to do this through the Microsoft Windows Server or the Microsoft Azure Portal.
Microsoft Windows server
- Open the Microsoft Windows Server and launch Server Manager.
- Select the appropriate active directory domain from the navigation tree and open the Groups pane.
- Select the desired user and open their properties.
- Select the Account tab and enter the downlevel logon name of your choice.
Microsoft Azure Portal
- Log in to the Microsoft Azure portal.
- Select the appropriate active directory domain from the navigation tree and open the Users pane.
- Select the desired user and open their properties.
- Select the Account tab and enter the downlevel logon name of your choice.
FAQ
Q: Who can set up downlevel logon names?
A: Downlevel logon names can be set up by an account administrator in the Microsoft Windows Server or the Microsoft Azure Portal.
Q: Are all logon names secure?
A: Generally, yes. Downlevel logon names are backed by the full user name, so they don’t impact existing security settings. It is up to the administrator to set up a secure downlevel logon name to ensure that only authenticated users are granted access.
Q: Is there a limit to the number of downlevel logon names that can be set up?
A: No, there is no limit to the number of downlevel logon names that can be set up.
Q: Is there a difference between downlevel logon names and user aliases?
A: No, the terms can be used interchangeably and generally refer to the same thing.
Q: Is it possible to disable downlevel logon names?
A: Yes, this can be done through the Microsoft Windows Server or the Microsoft Azure Portal.
Related Links:
Microsoft Windows Server: https://docs.microsoft.com/en-us/windows-server/
Microsoft Azure Portal: https://portal.azure.com/