Q

Changing domain controller names in Windows 2000 Server

Is there a tool or a preferred way of changing the domain controller name in Windows 2000 Server?

I just read a question answered by Tony Northrup about changing the domain controller name in Windows 2003 Server. I was curious to know if there is a tool or a preferred way of changing the domain controller name in Windows 2000 Server?
The changing of a name of a Windows 2000 server is not supported and won't work with the tools that appear in the Windows 2003 version. The only way to do it is as follows:

1) Make sure that you have an additional domain controller. If you usually only have one domain controller (the

one whose name you want to change), make another Windows 2000 server a domain controller temporarily. You can even build a spare workstation machine up as a domain controller if you are just using it for this purpose.

2) Move all of the Flexible Single Master Operations (FSMO, fizz-mo) Roles over to the server you just made a domain controller. Make sure that this goes flawlessly! Validate the move. Here is the way that I like to move the FSMO Roles, using the NTDSUTIL.exe: http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

3) Validate that directory replication is completed and up to date. You can use the Windows 2000 resource kit tool REPLMON to do this.

4) Run DCPROMO on the machine that you will want to change the name of and DEMOTE the machine to being a domain controller. Make sure that you indicate that this IS NOT the last domain controller. If the demotion does not go properly -- stop! You likely have a replication, DNS, or communication problem between the DC that you created and the one that you are trying to demote. Proceeding without rectifying the issue could result in loss of AD data.

5) Make sure that you know what the local Administrator username and password is on the server that you are going to rename.

6) Remove the machine from the domain and reboot

7) Rename the server and reboot

8) Add the machine back into the domain, reboot.

9) Run DCPROMO and PROMOTE that machine to a domain controller.

10) Validate that Directory Replication is working correctly and has completed successfully. Make sure to review the File Replication Event Log and validate that the SYSVOL share exists on the newly promoted server.

11) Move the FSMO roles back to the renamed server. Validate this move was successful.

12) Run DCPROMO on the temporary DC you created and DEMOTE the server back to a member server. Don't skip this step or you will create orphaned objects in AD resulting in serious replication issues.

13) Retire the temporary DC or return it to service as it was before.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in November 2004

Dig deeper on Domain Name System (DNS)

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close