The "Name" property of the WinNT provider is sometimes called the "NT Name", because it is the name used in NT networks. The WinNT "Name" property of a user object is the pre-Windows 2000 logon name. The LDAP provider calls this attribute "sAMAccountName". The value can be the same as the value assigned to the LDAP "cn" attribute, but it does not have to be. This can be a major source of confusion