Active Directory Domain Rename

About domain renaming is also a phenomenon that many network managers have encountered in recent years, often due to changes in the company's name due to internal or external reasons. Then the company's domain name will change accordingly, but due to the speciality of the domain architecture, renaming the domain is not as simple as modifying the host name of the computer. Then I will explain the domain renaming in detail. The operational process.

Let's list the experimental environment first:

Domain name: demo.com

Domain controller: server.demo.com

IP: 192.168.5.1

Subnet mask: 255.255.255.0

DNS: 192.168.5.1

There is also a domain external controller named: test20031.demo.com, one Subdomain: test.demo.com

Purpose of the experiment: Rename demo.com to try.com

1. Prerequisites:

1. All domain controls All must be Windows Server 2003, which is a prerequisite because Windows 2000 domains do not support domain renaming. If you are a Windows 2000 domain, then you can only use Active Directory to migrate Active Directory. For details, see my previous article.

2, because the domain renaming operation is not done on the domain controller (this is beyond the expectations of many people), so in addition to the domain controller, there must be a device A member server of Windows Server 2003, and must have joined the domain. The configuration of this computer in this lab environment is as follows:

Computer Name: ren2003.demo.com

IP: 192.168.5.6

Subnet Mask: 255.255.255.0

DNS: 192.168.5.1

Second, preparation:

1. Before performing domain renaming, please use Ntbackup tool to back up all domain control now. System status data data, just in case. I have already covered it in detail in the previous article ——“Active Directory Backup and Recovery", and it will not be repeated here.

2, to perform domain renaming operations, all domain controllers must be Windows Server 2003, and upgrade the domain and forest functional level to Windows 2003 native mode, because the default is Windows 2000 mixed mode; Raising the domain functional level I have already mentioned in the "Active Directory Migration" is mentioned here, here I just mention the upgrade level of the forest:

Click “ Start - Settings - Control Panel - Administrative Tools - Active Directory Domains and Trust Relationships::

Right-click on the "Active Directory Domains and Trusts":

Select “Upgrade Forest Functional Levels>:

Click “Raise” It's fine, but this operation is also irreversible. Before you must ensure that the domain level is in Windows Server 2003, including the domain level of the subdomain!

After the upgrade is completed, everyone should pay attention to the time of copying. It is best to wait for a while. As for how long it will take depends on how long it takes. The size of your network is large.

3, create a new DNS zone, the domain name should be consistent with the domain name of the newly created domain;

Click “Start-Settings-Control Panel-Administrative Tools-DNS”:

Right click on the “Forward Lookup Zone”:

Select “New Zone>:

Point“Next”:

“Main area”, others keep the default, point “Next”:

Select “All domain controllers in Active Directory forest demo.com”, then click “Next” ”:

To enter the domain name of the new domain, the experiment is "try.com", continue to "Next" " Br>

After confirming that there is no problem, click “Complete” to complete the “Random”:

Third, rename the operation;

1, get the rename tool on the member server.

By default, the rename tool will not be installed, so we have to go to the installation CD to get this tool, at x:\\valueadd\\msft\\mgmt\\domren, (X means the installation disk is located The drive letter of the drive):

The names of the two tools are rendom.exe and gpfixup.exe, where rendom is the main tool we use, and gpfixup is used to fix group policies. There is also a readme document, a good English friend can look at it. I copied these two tools to the hard disk. In the experiment, I copied the C drive.