File Share Encryption

I have recently begun deploying the PGP client to users in our company, and I have noticed that the users are listed only by their first name (Consumers - Users).  I did figure out how to manually edit the display name, but there are two problems with that.  First, the names change back!  If I change a name to include last name or even alter the first name, it eventually changes back to the original.  Second, it really isn't feasible to manually edit all the names as I will be rolling out the encryption to more and more people.  I am running 3.2.0 MP3 (Build 2317) on the Universal Server.  Has anybody experienced this problem, and more importantly, does anybody know of a solution?

Probably its changing after client policy updates.

Are you using Directory Syncronization ?

If so, you will need to change the name on the Directory account and see if refresh on Universal.

We are using directory synchronization.  The common name shows the first and last names but is only pulling the first name.  There is likely an LDAP entry I'll have to make.  Finding out what that is may prove slightly more difficult.  Thanks for your input.

Probable LDAP field for Lastname is empty?

I think we're onto something.  I ran this by my supervisor, and he indicated that I needed to find out what attribute is being used by Symantec.  Does that make sense?

It can be one of these LDAP attributes, you should compare and fill them properly , and look for changes (will need to re-enroll user probably):

Firsname + lastname

Display name

User logon

For those entrys that are already enrolled you can go to users tab, click on the user, select Edit names and change them.

Please state if this worked for you

I ran this by him, but I must still be confused.  He said that we need to know the attribute that Symantec uses to pull the information from LDAP, such as CN.  Does that make sense?  There's apparently somewhere on the Universal Server that we have to enter this information.  Is it under Consumers - Directory Synchronization (select domain) - Base Distinguished Names?  Thanks for sticking with me!

base distinguished name is usually set to the root of the directory, usually

DC=domain,DC=com

or you can specify users folder CN=Users,DC=pgpjulian,DC=com

I don´t think this is related to your issue anyway.

LDAP attributes you should check for each user:

check in the attachement

I have consulted with a couple of colleagues.  We believe we may know what the problem is, but I would like for you to confirm. 

To recap: I look in Consumers - Users on the Universal Server and only see first names. 

From what I've learned is that the data I'm looking for is predefined in the LDAP directory.  For example, in your screenshot, your full name is based on the cn or displayName attributes.  If this is correct, the problem is that our LDAP directory only shows the first name.  Is there a way within the Universal Server to show more of the columns that may list the last name (whatever that attribute may be on our LDAP directory)?  Would the issue only be resolved by changing our LDAP directory?

Thanks for your continued patience.  Hopefully this will prove to be a valuable resource for others.

Unfortunately that cannot be changed.

You will need to make those changes to the directory.

Hopefully you can use a script or find the way so that each user can change his own name/lastname on the LDAP directory.

Tell me if I can help you with anything else.

Otherwise , please mark this post as solution

Thanks for all your efforts!