We have 2 Windows 2003 Servers running AD. Our domain name is ourdomain.com but has caused issues with our website and email hosted offsite. We've added specific DNS pointers to solve this but would like to rename ourdoamin.com to ourdomain.local. These are the only 2 domain controllers in the forest and no Exchange servers.
I've started reading the Microsoft document Step-by-Step Guide to Implementing Domain Rename but I think it's less complicated than the document seems because of the simple one domain name and 2 controllers. Am I correct? Should this be a fairly simple straight forward procedure?
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Attackers love to prey on accounts that have privileges.
Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …