Length limitation on domain accounts?

  • I'm attempting to create a login from a Windows account like so:

    USE [master]

    GO

    CREATE LOGIN [DOMAIN\MyLongerThan20CharacterServiceAccount] FROM WINDOWS WITH DEFAULT_DATABASE=[master];

    GO

    But this fails with the error:

    Msg 15401, Level 16, State 1, Line 1

    Windows NT user or group 'DOMAIN\MyLongerThan20CharacterServiceAccountnot found. Check the name again.

    This account however does exist. If I attempt to shorten it to 20 characters (pre-Windows 2000 format) it works!

    USE [master]

    GO

    CREATE LOGIN [DOMAIN\MyLongerThan20Charac] FROM WINDOWS WITH DEFAULT_DATABASE=[master];

    GO

    Has anyone ran across this 20 character limitation before? I'm assuming there is a simple fix or configuration setting to correct this behavior but I'm hoping someone can chime in on what that is.

  • Evidently it's a limitation of the SAM Account Name attribute in order to be backwards compatible with older clients - http://msdn.microsoft.com/en-us/library/ms679635.aspx.

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply