Failed /rendom 2k8 domain rename

Posted on 2009-05-26
Medium Priority
Last Modified: 2012-06-27

I'm trying to setup a domain for the organization I'm currently working for. It includes 1DC, 3BDC, 7RODC. I was at the point where i was ready to deploy, when i was told that they wanted a different domain name. I tried the steps from: http://it.toolbox.com/blogs/techscrawl/server-2008-domain-rename-28069 and it all went successful until after the domain was renamed and it restarted. That was step 8, step 9 for /rendom clean and after that didnt work so well, so i kept doing research and i had to change the dns suffix.. fine.. i found out how to do that with the help of this post http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_23609978.html?sfQueryTermInfo=1+10+2008+domain+renam+window 

problem is that even after the dns suffix was changed on the DC, the domain isn't completly renamed. when i tried the same commands to change the dns suffix for the BDC and RODC i would get a access denied error. Here are my problems:

1. 2BDC and 4RODC can't log in. They say that there's no server available to validate log in request.
2. When i tried make a client join the domain using the new domain name, the domain cannot be found, i try with the old name and it finds it but i get a name translation error.
3.Even if i scrap this failed rename project and format everything i already added about 400 user, it would be a real pain putting those back in.. is there a way to export them?
Question by:hfrancisco
  • 3
  • 2
LVL 19

Expert Comment

by:vmwarun - Arun
ID: 24477505
This may sound idiotic, but did you take a backup of your old DC before domain renaming ?

Author Comment

ID: 24477618
i did not
LVL 21

Expert Comment

ID: 24478110

Did you make the new DNS zone before you started the renaming?

Did you run diagnostics before you started? (dcdiag and netdiag)

In step 5, did all DC's report back and was ready or did you manually modify the xml-file to make some ready?

Was you doing the rename job with the Enterprise admin from a 2003 SP1 or newer. This server NEEDS to be a domain member, not a DC!

After step 6 has finished there is no going back (without a backup) -> You can export users with ie. LDIFDE: http://support.microsoft.com/kb/237677

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Author Comment

ID: 24479426
Ouch ok, I did all the steps with exception of making the new dns zone before the renaming. Does that mean I'm done for?

damn, i guess is back to square one. at least i can export the users.
LVL 21

Accepted Solution

snusgubben earned 2000 total points
ID: 24481084
Like the article you found, it state that the new DNS zone (just an empty zone) is one of the prerequisites. If I remember correct this is not stated in the official documentation from MS.

If the zone is not created it will not populate with SRV, CNAME and A-records.

You can try to create the zone and do these steps on each DC (reboot the DC's your not able to log on to):

ipconfig /flushdns (from cmd)
ipconfig /registerdns
dcdiag /fix
restart the netlogon service (from services.msc)

If this is not working I'm 97,5 per cents sure it will take less time to rebuild your domain.


Author Comment

ID: 24486185
I created the new DNS zone and ran the commands but still same problem. I should have looked at that part a little more carefully.

Oh well thanks for the help mate. Time to move on by rebuilding.

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

586 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question