[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

[VERY URGENT] Domain Rename Question

Posted on 2004-11-19
21
Medium Priority
?
241 Views
Last Modified: 2010-04-19
We have an NT PDC.

Can I rename the domain on that from <companydomain> to <tempcompanydomain>.

I will then create a new domain on thw Windows 2003 machine called <companydomain> and use the ADMTv2 migration tool to move the user accounts accross.

ADMTv2 requires different domains for the migration. Also our 2003 server is running in 2000 native mode.

I need 2 or 3 expert opinions on this urgently! =) thanks


----
If I manage to get this setup correctly and working, I will send you £5 via paypal for a couple pints on me. ;-)
0
Comment
Question by:georgecooldude
  • 13
  • 8
21 Comments
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12623593

It's a fun little process, but I've never done it personally so I can't confirm that it works:

http://www.burgettsys.com/stories/56485/

That contains a copy of an old MS Article.
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12623647
But you think it is possible?

It is vital that the older client machines dont need a domain change now. I've been told we cannot visit each machine.

I dont know why i didnt think of migrating this way before ... :(



0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12623661
also is it just a case of changing the domain or am i going to have to play with the registry and stuff. I've really got to get this sorted today! eek!
0
Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

 
LVL 71

Expert Comment

by:Chris Dent
ID: 12623803

The method above basically requires that you visit each machine on the domain to change the domain name. And that each machine is switched off for the duration of the name change.

To be honest, the requirement that clients can't be visited is likely to cause far more problems than anything else. I can appreciate the need for as little disruption as possible, but really it looks to be creating far more problems than is possible to solve.
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12623950
yes, i would prefer to visit clients but i've been told this is not possible...

I have changed the domain on the NT to <companyname2>

I am creating a new domain on the new server called <companyname>

I will now create a trust and use the ADMTv2 tool to move everything.


Then hopefully we can switch the servers over with little disruption. I dunno how well this will work but it will prove a point if the domain is the same and the computername is the same and if nothing works then we do need to take a visit to each machine. I really hope this works...

I'll update soon
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12624026
ah crud.

I uninstalled my AD and DNS and did a reboot. Stupid thing loads up to the windows 2003 boot screen bit and then the screen goes black...

Any quick ideas or is it format time again? Do'h!
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12624092

Safe mode or last known good?
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12624106
phewww! Found the problem to that one. Had my USB stick connected to it and it was stopping it boot. I know that for the future. I was really panicking! lol
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12624223
Any ideas what "access denied eror code 5" means.

I get this when i try and run the trust migration tool on the windows 2003 machine.

I've forgot if i need to adjust the nt settings aswell
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12624556
ok ok, ive fixed that. did a trust via the command line using the following. (just leaving here for future users)

netdom trust nt4dom /D:win2kdom.com /UserO:ntAdmin /PasswordO:ntpassword /UserD:win2kadmin /PasswordD:win2kpassword /Add /Twoway

Type NETDOM help trust or just NETDOM /? for more info.


----

Right O!.

I'm going to try migrate stuff now, just got prblems with the dam passwords
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12624721
Chris,

Will my 95, 98, ME and NT machines still be able to connect to a windows 2000 native mode?

They are all clients. None are servers
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12624807

Yes, the switch to Native Mode only removes the ability of NT4 servers to authenticate users (aka NT4 BDCs).
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12625553
ok, I am trying to migrate and I am unable to move my SIDs.

It is saying "Could no verify auditing and TcpipClientSupport on domains. Will not be able to migrate SID's. Access is denied."

Any ideas on the above? I had to create the TcpipClientSupport registry key on my NT domain but it didnt say I had to on the 2003 one... I've created the key on the 2003 server but still no luck. Perhaps you know?
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12626181

Sorry, I haven't seen that one before so I can't help with it.
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12626283
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12626489
It could be to do with my trust I setup. I had problems with it. I will have to investiage. Thanks for the link i will work through the problems
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12626656
I think i may have to disable the SID filtering.


As my trust isnt fully setup i suspect it doesnt let me move the sids as its a secutiry risk. If I disable that and then re-enable at a later date everything should be fine.
For furture referrence i am using this command:
-----------------
The related command to disable SID filtering is:

    netdom trust RESDOM /D:ACCDOM /UD:ACCDOM\Administrator /PD:adminpwd /UO:RESDOM\Administrator /PO:"" /filtersids:no

To verify the SID filtering settings on a domain, use this command:

    netdom trust RESDOM /D:ACCDOM /UD:ACCDOM\Administrator /PD: adminpwd /UO:RESDOM\Administrator /PO:"" /filtersids

-----------------

I'll update in a few moments
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12626753
well that command I posted i aload of rubbish. It just gives me synatx error :'(

Do you know the correct command format?
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 12626855

Those RESDOM and ACCDOM entries are the domain names you're dealing with.

In this instance I think RESDOM is the NT 4 domain, and ACCDOM is the 2000 Domain.

Can't say I know if that command will help you though ;)
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12626898
oops. no RESDOM and ACCDOM were what were filled in from the article i copy and pasted from.

in this article.
http://www.jsiinc.com/SUBI/tip4400/rh4432.htm


Maybe I am stupid but could you translate it for me?

NET DOM <ntdomain> /... <2k3domain> <2k3pass> <2k3admin> etc. I seem to be following those instructions wrong. =(
0
 
LVL 71

Accepted Solution

by:
Chris Dent earned 1500 total points
ID: 12627053

This article is more complete:

http://support.microsoft.com/kb/q289243/

And it looks like the command should be:

netdom trust <NT4 Domain> /D:<2003 Domain> /UD:<2003 Domain>\Administrator /PD:adminpwd /UO:<NT4 Domain>\Administrator /PO:adminpwd /filtersids:no

But then the article only applies to Windows 2000 Server, so it might not be what's causing the problem.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question