SECURITY_AD_NT_DOMAIN

Optional. When specified, allows users to log in without specifying the domain name component. For example, consider user 'user' of domain 'DOMAIN':

• When SECURITY_AD_NT_DOMAIN=DOMAIN, the user can log in using 'user' or 'DOMAIN\user'.
• When SECURITY_AD_NT_DOMAIN is omitted, the user must log in using 'DOMAIN\user'.

This configuration parameter expects that the domain name be specified in its 'NT domain name' form. This form is also referred to as the 'NetBIOS domain name' form.

To get the NT domain name:

From AD Explorer:

1. Connect to the Active Directory.
2. Navigate to Root > CN=Configuration,... > CN=Partitions,...
3. Expand the CN=Partitions,... element, and select a sub-element that represents the Windows domain.
4. The NT domain name appears under the 'nETBIOSName' attribute of the selected element.

From a domain computer:

1. Open a command prompt (cmd.exe) via the Start menu.
2. Do one of the following:
   1. Type echo %USERDOMAIN% to display the USERDOMAIN environment variable.
   2. The NT domain name prints.

OR:

1. Type net config workstation to display the network settings for the computer.
2. The NT domain name appears under the 'Logon domain' field.

OR:

1. Type gpresult /r to display the policy information for the current user.
2. The NT domain name appears under the 'Domain Name' field.

From the domain controller:

1. Open 'Active Directory Domains and Trusts' from the Start menu.
2. In the console tree (left-hand column), right-click a Windows domain and select Properties.
3. The NT domain name appears under the field 'Domain Name (pre-Windows 2000)'.