Problems after renaming domain controllers and member servers (2003/2000).

I'm inheriting a 2003 Windows Network configured as follows:

1-2003 Small Business Server (domain controller and Exchange server, all FSMO roles)
1-2003 Server acting as a redundant domain controller
2-2000 Member Servers for additional services (DHCP, File Server, etc.)

Here are some recent changes that I am aware of...

I know that 2 new servers were added to this environment (the 2003 servers). Both of the 2000 boxes were demoted from domain controllers making the 2003 servers the only domain controllers. Everything is running at 2000 functional level. After the upgrades were completed, the machines (including domain controllers) were renamed. I know this is a new feature in 2003...All documentation I see says that the forest must be operating at 2003 functional level in order to change DC names, however I verified that the forest is running at 2000 level (not sure if this is a factor or not).

And now the problem...

Ever since these events took place, the backup server (2000 server running Backup Exec 10D) is unable to successfully authenticate with the 2003 small business server only in order to collect data via a remote agent.  After digging through the 2003 SBS, I see that  the old 2000 servers are still listed by their old names in Active Directory Sites and Services. Both of the 2003 servers are listed correctly. In Active Directory Users and Computers both 2003 servers are listed correctly as domain controllers. I am looking through event viewer and everything looks clean, no NTFRS, DNS, or Directory service errors..

How do I attack this problem? I am looking over Microsoft Article ID 316826. Is this what I need to do to resolve? I am unable to communicate with the person who performed the upgrades, etc. so I'm not sure what procedure was followed for renaming the domain controllers, etc. Hopefully someone with some experience renaming 2003 domain controllers and/or 2000 servers can point me in the right direction.
FIFBAAsked:
Who is Participating?
 
LauraEHunterMVPCommented:
How many users/groups are configured on this domain? How big is the Exchange store?

I ask this because renames on SBS (or anytime Exchange is in the mix) are an -ugly!!!!!- proposition.  Combine this with the fact that you're seeing many errors to begin with and you're walking into a situation in which you don't know where all of the bodies are buried, a question worth asking is: is it worth the trouble to tear your hair out fixing the existing environment, or would it be worth your sanity to blow out SBS, re-configure the domain and start fresh?  

It might be the difference between one LOOOONG weekend re-installing things versus months and months of chasing down niggling errors and things just not working quite right.

In a "big server" enterprise AD deployment I would almost never suggest this approach, but if we're only talking about 10 users on an SBS box and a few GB in the Exchange store, it might end up being the better option.

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking
0
 
FIFBAAuthor Commented:
I just dug a little deeper through the logs on the second 2003 DC (not SBS). I see event 53258 MSDTC could not correctly process a promotion/demotion event...It stopped about a week ago. I also see event 4193 MSDTC that seems to imply that the event is being supressed (filtering duplicate events=1).
0
 
FIFBAAuthor Commented:
I think there are around 40 users.
0
 
MarkMichaelCommented:
Sounds like it may be a SID issue. It may be worth clearing out any of the old/nonexistant names manually from DNS/ADSIedit? I doubt raising the functional level after the event is going to help you either.
0
 
LauraEHunterMVPCommented:
Even with 40 users I might be tempted to just blow the whole thing out and start over.  I would much rather look at a domain and say "Yes, I'm confident that this is configured correctly because -I- did it", rather than "Good grief, what -else- did Skippy my Genius Predecessor do wrong that I haven't found out about yet?"
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.