As the word 'distinguished' suggests, this is THE LDAP attribute that uniquely defines an object. Each DN must have a different name and location from all other objects in Active Directory. The
other side of the coin is that DN provides a way of selecting any object in Active Directory. Once you have select the object, then you can change its attributes.
Time spent in getting to know the DN attribute will repay many fold. Observe the different components CN=common name, OU = organizational unit. DC often comes with two entries, DC=CP, DC=COM.
Note that DC=CP.COM would be wrong. Incidentally in this situation, DC means domain content rather than domain controller.
