up vote 0 down vote favorite
share [g+] share [fb]

I need to rename/recreate a domain from example to lan.example.com.

  1. Current PDC for "example" Windows 2003 SBS domain with 0 computers added to domain
  2. It has user accounts created that users use to log into SharePoint, this is the only part i want to preserve - accounts

This should be simple as i don't have any computers connected to the domain.

Thought #1 - remove and add a domain

I thought i will just:

  1. remove domain and add with a new name (with dcpromo)

But i feared when it warned that "All user accounts in this domain will be deleted". No, don't do that...

Thought #2 - have a secondary computer to help

So i thought i`ll do:

  1. Make a computer B as PDC for lan.example.com
  2. Export users from A (that hosts "example" domain) and import on computer B with ldifde utility
  3. Remove domain from the computer A
  4. Install on computer A domain lan.example.com
  5. Set A as PDC and B as BDC. (swap)

I`m not aware if those steps can be done, so that's why the question is here - can it be done that way? Can someone suggest a more simple way to do it that would not involve computer B? It would be excellent if passwords could be preserved.

link|improve this question
100% accept rate
what domain does sharepoint live in? – Jim B May 24 '11 at 14:23
On the same computer A. – Janis Veinbergs May 25 '11 at 10:40
feedback

2 Answers

up vote 1 down vote accepted

If you're running a recent version of AD, you can just rename the domain. If you're actually running NT 4.0, as suggested by your repeated use of the term PDC, there will be a lot more to do.

I think you need to specify some server OS and AD details, like the version, particularly. Also helpful - why do you want to rename the domain? Is the Sharepoint server in the same domain as the current DC?

link|improve this answer
Windows Server 2003, AD functional level: Windows Server 2003. SharePoint is on he same PC as AD. Why do i want to rename the domain? Because now its easy when almost nothing is built upon the domain infrastructure (no computers connected to domain) rather than later. I want a domain with a valid TLD if we ever need to establish trust relationships with someone say after 5 years. – Janis Veinbergs May 25 '11 at 5:39
1  
OK, I question your need for this. You don't need a domain with a valid TLD to establish a trust with another AD : things like that are typically done over VPN tunnels anyway, not over the public internet. And they're not typically done anyway, IME. Unless you're bought out by someone else, or buy someone else, and need a trust until you can complete a migration to a single domain. – mfinni May 25 '11 at 12:07
Umm, sorry, not about trusts, but about being MS recommendation "It is best to use DNS names that are registered with an Internet authority in the Active Directory namespace... Using single label names or unregistered suffixes, such as .local, is not recommended.". Currently its a single label and i thought before i build something upon the infrastructure, i should do this step first. – Janis Veinbergs May 25 '11 at 13:41
1  
There's more than one school of thought about this. If you own example.com, you can make ad.domain.com and of course no one else can use it. You definitely shouldn't make your AD domain be amazon.com, but if its a subdomain of a domain that you own, you're good. External resolution of DNS into your AD may or may not be desired, and as I said, isn't required for making trusts. You only need the other party to be able to resolve your domain. The .local thing actually was recommended, or at least not deprecated, with Win2k, and it doesn't really break things. – mfinni May 25 '11 at 14:26
I chose not to rename the domain at all. Thanks for suggestions. – Janis Veinbergs Jul 4 '11 at 10:48
feedback
up vote 1 down vote

Microsoft offers a tool specifically for renames, rendom. That would be a good stand-in for the in-place upgrade in your thought #1. For #2, if you'd like to do a side-by-side migration, look at the migration tool to bring over the users.

link|improve this answer
ADMT won't work at the moment, because we are running W2003 Small Business and you can't establish trust relationships. I suspect ADMT requires trust relation setup to sucessfully do the migration. But i`ll try rendom tool. Thanks – Janis Veinbergs May 25 '11 at 5:42
1  
Aww, it looks like i can't do it on W2003 SBS: "You can rename domains only in a forest where all of the domain controllers are running Windows Server 2008/2003 Standard Edition, Enterprise or Datacenter Edition operating systems". So i guess only way out is i must export/import users and then they must change passwords? – Janis Veinbergs May 25 '11 at 10:26
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.