One of the needs that arise during an Active Directory upgrade is to have to rename the new Domain Controllers with the Name and IP of the old ones. This should be avoided, application owners should be advised about the impact of this misconfiguration and guided on who to properly configure them. Unfortunately, there are still environments that face this ask so I thought I would write a short how-to just to help to wants to insist this way or maybe mess around in a lab.
Before going through the steps be aware that you may have an issue with DFSR SYSVOL objects after the rename which the following article details:
Also after performing the procedure, the corresponding computer object contains left-over data with old and new samAccountName :
<old samAccountName >
<new samAccountName >
<SPNs for new samAccountName >
<SPNs for new FQDN name>
<SPNs for old samAccountName >
The first two attributes should be empty when rename is finished, and there should only exist SPNs for the new names.
Also you may want to check SRV records in DNS under _tcp.domain.com" and "_tcp.dc._msdcs.domain.com", they should match new name (old name shouldn't be there anymore)
Ok now let's move on...
My test environment has the following DCs:
There are two methods to achieve the same result.
The first method is the recommended one, always follow this process, as it is much easier:
First method (recommended): Proceed with removing the domain controller role from DC1 and then DC2 (demote) before inserting DC3 and DC4.
For those that are preserving with the rename process here you go:
Second method: used when you have or think to have applications hardcoded with DC name and want to preserve OLD names and IPs. In this case you install DC3 and DC4 and promote them to domain controllers 2016 so you will have 4 DCs (2 OLD and 2 NEW):
Netdom computername DC4 /ENUMerate ### The expected result of this command is the display of only one name.
Netdom computername /add: ### (where parameter is the FQDN of old DC2008):
Netdom computername DC4 /add: DC2.domain.intra
Netdom computername <temp-name> /MAKEPRIMARY <FQDN-old-name>
Netdom computername DC4 /MAKEPRIMARY DC2.domain.intra
Netdom computername DC02 /ENUMerate
Netdom computername DC2 /remove: DC4.domain.intra
Netdom computername DC2 /ENUMerate
Netdom computername DC3 /ENUMerate ### The expected result of this command is the display of only one name.
Netdom computername DC3 /add: DC1.domain.intra
Netdom computername DC3 /MAKEPRIMARY DC1.domain.intra
Netdom computername DC01 /ENUMerate
Netdom computername DC1 /remove: DC3.domain.intra
Netdom computername DC1 /ENUMerate
And that’s the end, now you have two new DCs that preserve the “old” DCs name and IP addresses.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.