There are times, when after creating and setting up domain environment you realize that you made a mistake in naming convention. For example domain with .local or .intranet was used. According to Microsoft and many sources like for example mdmarra.com blog you should avoid TLD and avoid above names since they are now sold by ICANN and might get registered by other companies. Why this might become harmful is a topic for a new book, or at least new blog post. I’m just providing a link to explanation: Domain naming best practices, AD Naming Considerations, Why you should avoid .local in AD.
So, after creating and configuring whole AD environment you have decided to change it’s FQDN or NetBios? You can always reformat controllers and start all over again – if it’s possible. But in most cases it isn’t :(
Thanks to Albal’s Blog I was able to rename our freshly created domain environment. Steps necessary to perform are:
1. Check you are working with the right domain controller (in this scenario we only consider this is one), enable Administrator account and login on this account.
2. Open DNS Manager and add a New Zone Under Forward Lookup Zone. Select Primary and replicate To all DNS servers running on domain controllers in this domain. Enter the new domain name. Then Select Dynamic Update, Click Allow only secure dynamic updates (recommended for Active Directory) and finish the wizard. You should now see the new Domain name is listed in DNS Manager.
3. Open a Command Prompt as Administrator and run:
- rendom /list
- change all occurrences of DNSname to match your new domain – do the same with theNetBoisName for ForesetRoot – then save and close
- rendom /showforest
- rendom /upload
- rendom /prepare
- rendom /execute – and wait to be signed off
4. Login into the new domain (beware the login will default to the old login for now as it was the last used one) and check that all is well in computer properties.
5. Open Command Prompt again as Administrator and run (replace OLD_ and NEW_’s with your domains:
- gpfixup /olddns:<OLD_DOMAIN> /newdns:<NEW_DOMAIN>
- gpfixup /oldnb:<OLD_NETBIOS> /newnb:<NEW_NETBIOS>
- rendom /clean.
- rendom /end
6. Rejoin old domain computers to this renamed DC or whatever you were wanting to do before.
All credits go to Alba’s Blog, thanks for that!