Changing domain FQDN

[pow]

Hi all,

 

The network I inherited (when we were connected to the PSN) is now organised from the right AD/GPO mess.

 

I still however have the DNS suffix of internal.schoolname.county.sch.uk - I'd quite like to change this to schoolname.internal.

 

I'm full 2012R2 in terms of domain level and have just (properly) retired Exchange 2013 in favor of Office365 (where we use a UPN of @schoolname.com), has anyone got any real world experience of doing this?

 

I do have a CA in the domain that issues certificates for DirectAccess and other internal only stuff... I assume the CA will need some reconfiguring and the computers will want new certificates?

 

Thanks

Edited May 23, 2016 by pow

[Duke5A]

Hi all,

 

The network I inherited (when we were connected to the PSN) is now organised from the right AD/GPO mess.

 

I still however have the DNS suffix of internal.schoolname.county.sch.uk - I'd quite like to change this to schoolname.internal.

 

I'm full 2012R2 in terms of domain level and have just (properly) retired Exchange 2013 in favor of Office365 (where we use a UPN of @schoolname.com), has anyone got any real world experience of doing this?

 

I do have a CA in the domain that issues certificates for DirectAccess and other internal only stuff... I assume the CA will need some reconfiguring and the computers will want new certificates?

 

Thanks

 

Aside from the pain you're inviting on yourself with onsite Exchange and a CA, you're domain is already named properly.

 

Why you shouldn't use .local in your Active Directory domain name.

[mikkydoos]

Youre asking yourself to rebuild your entire AD structure m8.

[synaesthesia]

There is *nothing* wrong with using .internal on it's own. That above article was pointed out on here originally so people avoided the .local issues typically surrounding Apple hardware.

 

Frankly though I wouldn't worry about renaming it too much; is it really going to be worth it between now and whenever you do your next big refresh?

[pow]

The more I read into it the more I think that's new domain territory, the more I think leave it haha!

I'd never go .local but anything new I normally setup .internal