mikkydoos Posted June 22, 2015 Posted June 22, 2015 Hi all, Left LA a while ago but my AD domain is still name.region.sch.uk which I'd like to change (if its not going to cause me too many problems). Our domain has always been that named that way instead of ****.pri or ****.local since before I worked here. Has anyone ever renamed their domain ? If so how did you do it? I take it that all the client machines had to be rejoined ? Cheers in advance
fairm010 Posted June 22, 2015 Posted June 22, 2015 Never done it but we have an academy conversion coming up so may be useful. Subbed. Also, dont use .local if you are or plan to use Apple kit!
mikkydoos Posted June 22, 2015 Author Posted June 22, 2015 Never done it but we have an academy conversion coming up so may be useful. Subbed. Also, dont use .local if you are or plan to use Apple kit! Erm... not another Apple pain in the butt ??
andydis Posted June 22, 2015 Posted June 22, 2015 possible! , requires a lot of planning. Imagine you had to put a change request form in for this, and under possible issues i can think off the top of my head:- 1) security certificates all become invalid 2) all users profiles will be default 3) links using FQDN will be invalid
fairm010 Posted June 22, 2015 Posted June 22, 2015 Erm... not another Apple pain in the butt ?? Yes, for reasons I haven't bothered to look into yet!
Arreks Posted June 22, 2015 Posted June 22, 2015 Yes, for reasons I haven't bothered to look into yet! We're on .local and we have around 40 Macs on our windows domain
3s-gtech Posted June 22, 2015 Posted June 22, 2015 (edited) If your reason to change it was that it is currently .local, it's worth doing. If you want to change it to .local, don't. Otherwise, just look into whether it's really worth doing for the sake of the name. There's nothing inherently wrong with the current format unless you are wanting everything to be potentially internet visible with a single DNS. Edited June 22, 2015 by 3s-gtech
DJ-1701 Posted June 22, 2015 Posted June 22, 2015 (edited) I've had a brief look into this recently and it is certainly not a simple task, you can't just select to rename an existing domain. Most from what I have read, others appear to recommend using a sub-domain of your web domain, also some suggest migrating using ADMT. The website 'The Sysadmins' has a ADMT series of instructions on using this, but I have still yet to read all the topics (https://blog.thesysadmins.co.uk/admt-series-1-preparing-active-directory.html). Edited June 22, 2015 by DJ-1701
Oaktech Posted June 22, 2015 Posted June 22, 2015 I've always been told not to touch it unless you are intending to tear everything down and start again.
mikkydoos Posted June 22, 2015 Author Posted June 22, 2015 I've always been told not to touch it unless you are intending to tear everything down and start again. My fears realised!
sted Posted June 22, 2015 Posted June 22, 2015 iirc the issue with .local is a mac sees .local as itself its not always an issue but can be. These days i tend to use .internal. I think the safest way would probably be just to start a new domain and start from scratch. You could however set up an alias fairly quickly so that even though your domain is name.region.sch.uk the alias could be stcheese.internal if it took your fancy. Again its something i know is there but have never used
Quackers Posted June 22, 2015 Posted June 22, 2015 (edited) I renamed our domain years ago it was trouble free, i just followed Microsofts documentation. There are other issues with .local beyond mDNS (Apple bonjour). From 1st November this year you wont get an SSL Certificate signed for a .local domain , so any SSL enabled service internally on a domain setup with .local might have an issue.... https://www.digicert.com/internal-names.htm Edit, just remembered i renamed when we had Exchange 2003. I believe if you have a version of exchange after that i.e. 2007 or 2010 its not supported and renamed cannot be done. If you don't have Exchange Server think you should be ok. Edited June 22, 2015 by Quackers
Arreks Posted June 22, 2015 Posted June 22, 2015 From 1st November this year you wont get an SSL Certificate signed for a .local domain , so any SSL enabled service internally on a domain setup with .local might have an issue.... https://www.digicert.com/internal-names.htm By the looks of it, that's .internal too
maark Posted June 22, 2015 Posted June 22, 2015 As per quackers post above - I did it when we went to an academy. Nerve wracking but possible - leave plenty of time - probably a summer job. I had to clean up a bit of DNS stuff.
sparkeh Posted June 22, 2015 Posted June 22, 2015 Isn't the Apple thing easily solved by adding your .local domain name to the search domains sections of the network settings. Apple kit seems to work fine for us with this added?
featured_spectre Posted June 22, 2015 Posted June 22, 2015 If you do want to rename a domain, use RENDOM, but be prepared for anything that is 3rd party to break.
DMcCoy Posted June 22, 2015 Posted June 22, 2015 Also you can't rename if you have an Exchange server that is any other version than Exchange 2003 SP2
ozydave Posted June 22, 2015 Posted June 22, 2015 If you do want to rename a domain, use RENDOM, but be prepared for anything that is 3rd party to break. As featured says be prepared for 3 rd party breaks. In 2009 I renamed a 2003 domain. Went well apart form the odd bit of software. I have cloned my domain into VMware with exchange 2007. Again most of the domain went well. Exchange stuffed up. Good luck
Areku Posted June 23, 2015 Posted June 23, 2015 Ran though this on a test network( almost a clone of our live), imo its not worth the hassle. (2012 functional level). and yes we have a exchange 2013 server. Glad it was a test network as we just shrugged it off, and wiped it. Only issue i can forsee in the near future is SSL certificates have stopped being issued to .locals / .internals etc.
featured_spectre Posted June 23, 2015 Posted June 23, 2015 Yeah its a royal pain. Only worth a name change if you migrate servers...perhaps a summer project?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now