Q. Does the sAMAccountName for an object have to be unique in the Active Directory domain or the entire forest?

A. The sAMAccountName attribute of an object must be unique for the domain, not the entire forest (each domain has an Administrator account  ). However, as a best practice, you should avoid having duplicate sAMAccountName values across your forests to avoid the possibility of modifying the wrong instance.