DomainRenameProcedure windows.docx
- 文档编号:28126055
- 上传时间:2023-07-08
- 格式:DOCX
- 页数:106
- 大小:193.85KB
DomainRenameProcedure windows.docx
《DomainRenameProcedure windows.docx》由会员分享,可在线阅读,更多相关《DomainRenameProcedure windows.docx(106页珍藏版)》请在冰豆网上搜索。
DomainRenameProcedurewindows
OperatingSystem
Step-by-StepGuidetoImplementingDomainRename
MicrosoftCorporation
Published:
April2003
LastUpdated:
August2004
Abstract
Thisdocumentprovidestheinformationandstep-by-stepinstructionsnecessarytoperformadomainrenameoperationinanexistingimplementationoftheActiveDirectory™directoryserviceinaMicrosoft®Windows® Server2003forest.Whenadditionalinformationisrequired,referencestotheMicrosoft®Windows® Server2003ResourceKitandWindowsServer2003ServerHelpandSupportCenterareprovided.
Thestepstoprepareforandperformthedomainrenameprocedurearedescribedinthisdocument.Allpreliminarystepsmustbecompletedbeforeanystepsinthedomainrenameprocesscanbeperformed.
Priortoperformingthestepsinthisdocument,itishighlyrecommendedthatyoureadandunderstandthedocumenttitled"UnderstandingHowDomainRenameWorks."
Thisisapreliminarydocumentandmaybechangedsubstantiallypriortofinalcommercialreleaseofthesoftwaredescribedherein.
TheinformationcontainedinthisdocumentrepresentsthecurrentviewofMicrosoftCorporationontheissuesdiscussedasofthedateofpublication.BecauseMicrosoftmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobeacommitmentonthepartofMicrosoft,andMicrosoftcannotguaranteetheaccuracyofanyinformationpresentedafterthedateofpublication.
ThisWhitePaperisforinformationalpurposesonly.MICROSOFTMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISDOCUMENT.
Complyingwithallapplicablecopyrightlawsistheresponsibilityoftheuser.Withoutlimitingtherightsundercopyright,nopartofthisdocumentmaybereproduced,storedinorintroducedintoaretrievalsystem,ortransmittedinanyformorbyanymeans(electronic,mechanical,photocopying,recording,orotherwise),orforanypurpose,withouttheexpresswrittenpermissionofMicrosoftCorporation.
Microsoftmayhavepatents,patentapplications,trademarks,copyrights,orotherintellectualpropertyrightscoveringsubjectmatterinthisdocument.ExceptasexpresslyprovidedinanywrittenlicenseagreementfromMicrosoft,thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarks,copyrights,orotherintellectualproperty.
Unlessotherwisenoted,theexamplecompanies,organizations,products,domainnames,e-mailaddresses,logos,people,placesandeventsdepictedhereinarefictitious,andnoassociationwithanyrealcompany,organization,product,domainname,emailaddress,logo,person,placeoreventisintendedorshouldbeinferred.
©2003MicrosoftCorporation.Allrightsreserved.
Microsoft,WindowsServer2003DatacenterServer,WindowsServer2003EnterpriseServer,andWindowsServer2003areeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.
Thenamesofactualcompaniesandproductsmentionedhereinmaybethetrademarksoftheirrespectiveowners.
TableofContents
TableofContents3
Introduction5
DomainRenameRequirements5
PreliminaryStepstoPrepareforDomainRename6
SettingWindowsServer2003ForestFunctionality7
HowtoRaiseForestFunctionalLeveltoWindowsServer20037
CreatingNecessaryShortcutTrustRelationships7
TypesofTrustRelationships7
Pre-CreatingParent-ChildTrustRelationshipsforaRestructuredForest8
HowtoCreateShortcutTrustRelationships14
PreparingDNSZones14
HowtoAnalyzeandPrepareDNSZonesforDomainRename14
PreparingFolderRedirectiontoDomain-BasedDFS15
PreparingRoamingUserProfilesonDomain-BasedDFS15
ConfiguringMemberComputersforHostNameChanges16
ConditionsforAutomaticComputerNameChange16
ReplicationEffectsofRenamingLargeNumbersofComputers17
AvoidingReplicationEffectsofDomainRenameinLargeDeployments18
HowtoConfigureMemberComputersforHostNameChangesinLargeDeployments20
PreparingCertificationAuthorities25
ConditionsthatPrecludeSuccessfulCertificateManagement26
PreparingURLsforCDPandAIAExtensionsbeforeDomainRename26
EnsuringCAValidity26
StepstoPerformtheDomainRenameProcedure27
ActivitiestoDiscontinuePriortoDomainRename28
HowtoPerformDomainRename28
STEP1:
BackUpAllDomainControllers28
STEP2:
SetUptheControlStation28
STEP3:
GeneratetheCurrentForestDescription30
STEP4:
SpecifytheNewForestDescription32
STEP5:
GenerateDomainRenameInstructions37
STEP6:
PushDomainRenameInstructionstoAllDCsandVerifyDNSReadiness40
STEP7:
VerifyReadinessofDomainControllers44
STEP8:
ExecuteDomainRenameInstructions46
STEP9:
UnfreezetheForestConfiguration50
STEP10:
Re-establishExternalTrusts51
STEP11:
FixDistributedFileSystem(Dfs)Topology51
STEP12:
FixGroupPolicyObjectsandLinks53
AftertheDomainRenameProcedure57
VerifyCertificateSecurityAfterDomainRename57
PreparingURLsforCDPandAIAExtensionsafterDomainRename57
VerifyingtheUseofUserPrincipalNames(UPNs)58
EnablingCertificateEnrollmentinRenamedDomain58
VerifyingValidityofCDPandAIAExtensions61
RenewingSubordinateandIssuingCACertificates61
PublishNewCertificateRevocationLists61
UpdatingDomainControllerCertificates61
ChangingtheUserIdentityforSCEPAdd-on62
MiscellaneousTasks62
BackUpDomainControllers64
RestartMemberComputers65
AttributeClean-upAfterDomainRename66
RenameDomainControllers(Optional)67
APPENDIXA69
CommandLineSyntaxfortheRendomTool69
Command-LineSyntaxforthegpfixupTool73
APPENDIXB76
Checklists76
SatisfyingDomainRenameRequirements76
PreparingfortheDomainRename76
PerformingtheDomainRename77
AftertheDomainRename79
Worksheets80
Worksheet1:
DomainNameChangeInformation80
Worksheet2:
TrustInformation80
Worksheet3:
DNSZoneInformation81
Worksheet4:
DFS,FolderRedirection,RoamingProfiles81
Worksheet5:
DomainControllerInformation81
Worksheet6:
DomainRenameExecuteReadiness82
Worksheet7:
SoftwareDistributionPoint(SDP)Servers82
Worksheet8:
CertificateAuthority(CA)Information82
Introduction
Thisdocumentdescribestherequirmentsandthedetailedstep-by-stepprocedurenecessarytoplanandperformadomainrenameoperation.ThechecklistsofthevarioustaskstobeperformedduringthedifferentphasesofthisprocedurearesummarizedinAppendixB.SuggestedworksheetformatsforavarietyofworksheetsthatcanbeusedforgatheringrelevantinformationabouttheActiveDirectoryinfrastructureforplanningandfortrackingprogressasthedomainrenameoperationprogressesarealsoincludedinAppendixB.
DomainRenameRequirements
Thefollowingconditionsarerequiredtobeineffectbeforeyoucanbeginadomainrenameprocedure:
∙Exchange2003SP1:
IfyourActiveDirectoryforestcontainsonlyExchange2003SP1servers,youcanrunthedomainrenameoperation,butyoumustalsousetheExchangeDomainRenameFix-upTooltoupdateExchangeattributes. TheExchangeDomainRenameFix-upToolisavailableontheExchangeServer2003ToolsandUpdatesWebpage( Thedocumentthataccompaniesthetooldescribes whenandhowtoperformExchange-relatedsteps.Toperformadomainrenameoperation,Exchangemustnotbeinstalledonanydomaincontrollers.IfadomaincontrollerisrunningExchange,movetheExchangedataoffofthedomaincontrolleranduninstallExchange.
∙Exchange2003orExchange2000orExchange5.5:
ThedomainrenameoperationisnotsupportedinanActiveDirectoryforestthatcontainsExchange2000orExchange5.5servers.IfthedomainrenametooldetectsExchange2000servers,thetoolwillnotproceed.ThedomainrenametoolwillnotdetectwhetherExchange5.5serversexist;therefore,donotattempttheoperationiftheforestcontainsExchange5.5servers.
∙Renaminge-maildomains:
Thedomainrenameoperationdoesnotchangethee-maildomainsthatarespecifiedinExchangerecipientpoliciesande-mailaddresses.Ifyouwanttochangeyoure-maildomains,dosoafterthedomainrenameoperation.
∙Forestfunctionality:
YoucanrenamedomainsonlyinaforestwhereallofthedomaincontrollersarerunningMicrosoft®Windows® .Server2003StandardEdition,Microsoft®Windows® Server2003EnterpriseEdition,orMicrosoft®Windows® Server2003DatacenterEditionoperatingsystems,andtheActiveDirectoryforestfunctionallevelhasbeenraisedtoWindowsServer2003.Formoreinformationaboutforestfunctionallevels,see"ActiveDirectoryFunctionalLevels"intheDirectoryServicesGuideoftheWindowsServer2003ResourceKit.Formoreinformationabouthowtodetermineforestfunctionallevels,see"Toverifyforestlevel"and"Toraiseforestlevel"inWindowsServer2003 ServerHelpandSupportCenter.
∙Administrativeprivileges:
ThedomainrenameprocedurerequiresEnterpriseAdminsprivilegestoperformthevariousstepsintheprocedure.IfyouarerunningExchange,theaccountyouusemustalsohaveFullExchangeAdministratorpermissions.Therequiredpermissionsforeachstepintheprocedure,alongwiththedetailsofeachstep,aredescribedin"StepstoPerformtheDomainRenameProcedure"laterinthisdocument.
∙Controlstation:
Thecomputertobeusedasthecontrolstationforthedomainrenameoperationmustbeamembercomputer(notadomaincontroller)runningWindowsServer2003StandardEdition,WindowsServer2003EnterpriseEdition,orWindowsServer2003DatacenterEdition.
∙DFSrootservers:
Inordertobeabletorenameadomainwithdomain-basedDFSroots,allDFSrootserversmustberunn
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- DomainRenameProcedure windows