win_domain_user CN name

[nicolaibaralmueller]

SUMMARY

Module win_domain_user has no option to edit CN (Full Name).

ISSUE TYPE

• Feature Idea

COMPONENT NAME

win_domain_user

ANSIBLE VERSION

2.6.2

STEPS TO REPRODUCE

- name: Create User
  win_domain_user:
    domain_username: '{{ domain_username }}'
    domain_password: '{{ domain_password }}'
    domain_server: '{{ domain_server }}'
    name: '{{ username }}'
    upn: '{{ username }}@domain.com'
    firstname: '{{ firstname }}'
    surname: '{{ surname }}'
    password: '{{ password }}'
    password_expired: yes
    email: '{{ email }}'
    groups_action: add
    groups: "{{ usergroups }}"
    attributes:
      cn: '{{ firstname }} {{ surname }}'
      telephoneNumber: '{{ mobilenumber }}'
    state: present

EXPECTED RESULTS

User created with displayed full name (CN)

ACTUAL RESULTS

{
    "_ansible_parsed": true,
    "msg": "failed to change user testuser02: The attribute cannot be modified because it is owned by the system",
    "changed": true,
    "_ansible_no_log": false,
    "password_updated": true
}

User is created. But CN name is same as username.

[ansibot]

Files identified in the description:

• lib/ansible/modules/windows/win_domain_user.ps1

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

[ansibot]

cc @dagwieers @jborean93 @jhawkesworth @nitzmahone @nwchandler
click here for bot help

[jborean93]

I'm not sure this is even possible, I was under the assumption that the Common-Name could only be set on creation and cannot be changed unless you delete and recreate the user. The module supports the path option which should be able to set this for you.

[nicolaibaralmueller]

I'm not sure this is even possible, I was under the assumption that the Common-Name could only be set on creation and cannot be changed unless you delete and recreate the user. The module supports the path option which should be able to set this for you.

This is a creation of a user. The display name (CN) under active directory users and computers mmc just shows the username. When manualy creating a user the full displayed name can be edited.

[ansibot]

cc @if-meaton
click here for bot help

[ansibot]

Files identified in the description:

• lib/ansible/modules/windows/win_domain_user.py

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

[ansibot]

cc @ShachafGoldstein
click here for bot help

[ghost]

The issue is that system attributes cannot be changed like regular attributes are changed. In order to modify the CN/name of a user the Rename-ADObject command should be used. This means that those two additional attributes should be handled separately than the other additional attributes. Probably it would even make more sense to take them out as separate parameters of the win_domain_user module and handle their change with the above mentioned command.

By the way, there seems to be an alternative way of doing what you're trying to achieve as described in #45298. Unfortunately this other way is also not fully functional at the moment.

[nicolaibaralmueller]

Closing since this seems to have no solution