Shulou(Shulou.com)06/02 Report--

From the beginning of my career in Microsoft, I have often heard that so-and-so needs to modify the computer name of Active Directory domain controller for some reason, but I find that many companies modify it directly, which leads to all kinds of strange problems. Today, I would like to recommend a way to modify the computer name of Active Directory domain controller.

Often, many friends will change the FQDN name of the computer directly in the computer properties, as shown in the figure: the following warning message will be sent:

Through the above changes, sometimes inexplicably there will be a variety of strange problems, so it is strongly not recommended to play like this.

The proposed modifications are as follows:

1. We can see that the AD in my environment is called ADSrv01, as shown in the figure:

2. Use the command to check the FQDN name of the current DC server

Netdom computername ADSrv01.itsoul.cn / enumerate

3. Add a new FQDN name to the DC server, that is, register the new service subject name (SPN) in the Active Directory database, and register the new computer name resource record (SRV record) in the DNS server.

Netdom computername ADSrv01.itsoul.cn / add:ADSrv02.itsoul.cn

4. Use the following command to check all available FQDN names of the current DC server, as shown in the figure: we will find a new one based on the FQDN of the original computer.

Netdom computername ADSrv01.itsoul.cn / enumerate

5. Use the following command to set the new FQDN name to online mode in the Active Directory database

Netdom computername ADSrv01.itsoul.cn / makeprimary:ADSrv02.itsoul.cn

6. Restart the DC server according to the prompt.

7. After the DC server is restarted, delete the ADSrv01.itsoul.cn using the following command

Netdom computername ADSrv02.itsoul.cn / remove:ADSrv01.itsoul.cn

8. Use the command again to check the computer name

Netdom computername ADSrv01.itsoul.cn / enumerate

9. Click Server Manager, and click configure this local server to view the new computer name of the current DC server.

10. So far, the DC server has been renamed ADSrv02, but in order to ensure that the DC server can be used properly, it is recommended to check whether the following configuration has been updated to the new

11. Open the DNS server management console to see if ADSrv02.itsoul.cn has been added to the DNS

12. From the figure above, you will find that the original FQDN still exists in DNS, because the record will not be deleted in DNS itself, so you need to delete ADSrv01.itsoul.cn manually.

13. Expand "ITSoul.cn"-> "_ sites"-> "Default-First-Site-Name" _ tcp "to verify that the SRV record is updated to the new FQDN record of ADSrv02.itsoul.cn

14. After the above verification is correct, you also need to verify the five major roles of the DC server (operation host), using the following command to verify

Only at this point can we really complete the renaming of the DC computer name.

Reference link:

Link 1: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc835082(v=ws.11)

Link 2: https://blogs.technet.microsoft.com/askpfeplat/2017/06/19/using-computer-name-aliases-in-place-of-dns-cname-records/

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.