Windows2003 Domain Rename Tool (1)

First, the advantages of domain renaming tools

A new feature, you must have its unique advantages to be recognized by users, then what are the advantages of domain renaming tools? Let's take a look at the domain name change tool in Windows NT, Windows 2000, and Windows Server 2003. New domain and its domain controller, and then rebuild the old domain's account database in the new domain;

Windows 2000: Need to create a new domain with a different name and its domain controller, then you can use ADMT (AD The database migration tool) migrates the AD database in the old domain to the new domain, which saves the tedious operation of rebuilding the database compared to the NT era.

Windows Server 2003: It is not necessary to create a new domain with a different name, nor to rebuild or Migrating the AD database can be done with a few simple operations using the domain rename tool.

Warning:

The domain renaming process is a complex process that requires very careful planning and execution. In addition, the time it takes to complete a full domain rename operation is proportional to the size of the Active Directory forest and the number of domains, domain controllers, and member computers in the forest.

Second, domain name change requirements and restrictions

Re-name the domain to meet the needs of domain name changes caused by corporate mergers, mergers or name changes. The domain rename operation allows the user to change the name of the domain, adjust the hierarchy of the domain, such as modifying the parent domain of the child domain, or move the domain in one domain tree to another domain tree. Typical requirements for domain renaming are required:

Domain name change: This is a good understanding. Simply put, the original domain name cannot meet the needs of the existing domain, but needs to be renamed, such as shyzhong.com Change to lovebook.cn.

Independence of the domain: This is not very easy to understand. For example, the statistical group of the sales department of Company A decided to separate the group from the sales department because of the business expansion needs. In this independent process. It involves the domain name change operation. For example, change the original "tj.xsb.shyzhong.com" domain name of the statistical group to "tj.shyzhong.com".
Third, domain renaming impact on system services

Before starting the renaming operation on the domain, please be sure to understand the impact of the process on the system:

Lin will not be able to provide services for a short time. The forest service is interrupted when each domain controller performs a catalog database update, which is required for domain renaming and restart. The specific outage time is proportional to the number of domain controllers in the forest.

2. All domain controllers either successfully complete the domain rename or disappear from the forest.

3. The DNS suffix of the member computer of the domain may not match the DNS name of the domain for a period of time after the domain is renamed (by default, it will be automatically updated).

......

Fourth, the domain name change actual combat

Because domain name change operation has a profound impact on the system, so this operation should not be done lightly - domain renaming It will affect all the domain controllers (DCs) in the forest. The actual operation of renaming the domain can generally be summarized as the following steps:

1. Specify the new forest structure by modifying the domain name in the forest. ;

2, generate domain rename instructions according to the specified new forest structure, and encode them into special scripts, and then transfer them to all DCs in the forest;

3 Check the legality of the domain's rename directives (scripts) on all DCs and whether they are ready to execute them.

4. Execute the domain rename command on each DC in the forest. This step may result in a brief interruption in forest services.

5, patch the original data of the Group Policy in the directory, so that after the domain is renamed, the policy can continue to be applied.

6. Clean up all the original data related to the domain name renaming in the directory, so as to perform the next round of domain renaming when needed.

According to the above operation process, suppose that you need to rename shyzhong.com to lovebook.cn, then the specific operation of the name change is as follows:

Click "Start", "Settings", "Control Panel" ", "Administrative Tools", "Manage Your Server", in the "Manage Your Server" window that pops up, click "Manage this DNS Server".

shown in Figure 1 in the pop-up window Click to select "DNS", "Computer Name", "Forward Lookup Zones" item and right-click. In the shortcut menu that pops up, select the "New Zone" item.

shown in Figure 2 will open later in "New Zone" wizard, click on the "Next" button, enter "Area Type" box. 3

after selecting the default state click "Next" button to enter the "Active Directery copy area scope" setting box, select the 'Active Directery to all domain controllers in the domain shyzhong.com " Continue after the item.

shown in Figure 4 after the next step in the domain name "area name" input box setting said change, as the input "lovebook.cn" continues.

shown in Figure 5 is provided in the box, select the default "dynamic update" Next, i.e., the "Allow only secure dynamic updates (for use Active Directory)" item, allow dynamic updates with security mechanism. Then click on the "Finish" button wizard in the next step.

shown in Figure 6, after completion of the operation, it is equivalent to complete the establishment of the object field of the operation.

Because in Windows Server 2003, the system will only be allowed to change the domain name after upgrading the domain and forest level, so you should click Start, Settings, Control Panel, "Administrative Tools", "Active Directory Domain and Trust Relationship", select "shyzhong.com" in the window that opens and right click, and select the "Upgrade Domain Functional Level" item in the pop-up menu.

shown in Figure 7 will then pop up "raise the domain functional level" dialog box, click the down arrow to the right of the "Select an available domain functional level" entry below the pop-up menu, select "Windows Server 2003" and click the "Improve" button below, and then click the "OK" button in the prompt box that pops up to continue. As shown in Figure 8