3.3.5.6.4.5 UPN_DNS_INFO Structure
The KDC SHOULD<57> populate the returned UPN_DNS_INFO structure ([MS-PAC] section 2.10) fields as follows:
The UpnLength field is the length of the UPN field, in bytes.
The UpnOffset field is the offset of the UPN field to the beginning of the buffer, in bytes, from the beginning of the UPN_DNS_INFO structure.
The DnsDomainNameLength field is the length of the DnsDomainName field, in bytes.
The DnsDomainNameOffset field is the offset of the DnsDomainName field to the beginning of the buffer, in bytes, from the beginning of the UPN_DNS_INFO structure.
The Flags field is set the U bit if the user account object does not have the userPrincipalName attribute ([MS-ADA3] section 2.349) set.
The KDC inserts the DNS and UPN information after the UPN_DNS_INFO structure following the header and starting with the corresponding offset in a consecutive buffer. The UPN and FQDN are encoded using a two-byte UTF16 scheme, in little-endian order.