Change AD Connect domain suffix

Hello,
I have AD Sync working and it synchronizes local AD accounts to the domain.onmicrosoft.com AAD.
Is it possible to change the AAD accounts to use the real domain name?
I have added the real domain name as an extra domain in the Azure directory, but cannot find anywhere to change the suffix on the user accounts.
Thank you.
Rasmus

Hi Rasmus,
You will need to add your vanity domain name (verified domain name) that you have added to Azure AD as an Alternative UserPrincipalName Suffix in Active Directory Domains and Trusts.
If you launch ADDT and right click on the top node, you will be able to add the domain (contoso.com) to the list of userprincipalnames. You can then modify your user objects in AD and then if you do a Sync the accounts in AAD will be updated to use the verified
domain (contoso.com as oppose to the initial tenant domain name (contoso.onmicrosoft.com).
I hope that helps,
James.

Similar Messages

Latest version of CSAMC5.2 - if domain suffix changed, need new cert?

I know if MC name is changed, then the certificate has to be recreated along with other steps. How about if only the domain suffix is changed but the name stays the same? Will the agents still be okay?

Hi William,
This is a good question and the first time I have heard it.
My answer is no because a fully qualified domain name (FQDN) includes the domain suffix which you want to change.
The FQDN, as you well know, is necessary when the Agent Kit is created on the CSA MC. This kit includes both the FQDN and the Certificate necessary for Agents to communicate with CSAMC.
As a bit of a review I googled FQDN and here is a definition:
"A fully qualified domain name consists of a host and domain name, including top-level domain. For example, http://www.webopedia.com is a fully qualified domain name. www is the host, webopedia is the second-level domain, and.com is the top level domain.
A FQDN always starts with a host name and continues all the way up to the top-level domain name, so http://www.parc.xerox.com is also a FQDN."
Hope this helps.
Please rate all useful responses.
Best,
Paul

Windows 7 or Windows Server 2008 R2 domain join displays error "Changing the Primary Domain DNS name of this computer to "" failed...."

Hi,
Windows 7 or Windows Server 2008 R2 domain join displays error "Changing the Primary Domain DNS name of this computer to "" failed...."
DC:windows Server 2008 R2
Domain functional level:Windows Server 2003
When Winxp join domain, have no this error message.
I checked http://support.microsoft.com/kb/2018583?wa=wsignin1.0 does't work.
There have 3 suggestion in this article:
1.The "Disable NetBIOS over TCP/IP" checkbox has been disabled in the IPv4 properties of the computer being joined.
Doesnt's work.
2.Connectivity over UDP port 137 is blocked between client and the helper DC servicing the join operation in the target domain.
On my DC, I run netstat -an, reslut as below:
UDP 192.168.20.3:137 *:*
3.The TCP/IPv4 protocol has been disabled so that the client being joined or the DC in the destination domain targeted by the LDAP BIND is running TCP/IPv6 only.
We are not using IPV6.
This server recently updated from Windows Server 2003 to Windows Server 2008 R2. Before upgrade, when Win7 and Win2008 join this domain, also have the same error message.
Please help to check this issue.
Thank you very much.
BR
Guo YingHui

Hi Guo Ying,
I have faced this critical error which makes over-writes the host names in the domain when you join.
For example: Already you had a host name called as PC.domain.com in the domain.com Domain.
When you try to add the another host name called as PC in the domain.com Domain, it doesn't give you the duplicate name error on the network it does over-write the existing host name called as PC.domain.com & it will add the new host name into the domain.
Host name which got over-written will get removed from the domain. I faced this issue in my project. My DPM host name got removed from the Domain & new host name got joined into the domain which halted my backups for one day.
Final Resolution is as follows:
You need to start the dns console on the DC & drop down the domain name.
Select the _msdcs when you click on _msdcs it will show the Name Server's list on the right hand side.
You need to add the Domain Naming Master under the _msdcs or add all the domain controllers which you had.
After you add the Name server's try joining the PC OR Laptop to the domain which is successfully joins it.
Regards
Anand S
Thanks & Regards Anand Sunka MCSA+CCNA+MCTS

What would be the impact of changing Enterprise and Domain admin password

Hello,
I'm planning to change the Enterprise/Domain Admin's password for some security reasons. I do not know what all will fail, what are all the process is going to be impacted. Actually I don't want to see the bigger impact after changing
the password.
I've gone thru' few articles but it's in Powershell where I have the limited knowledge & can't customize the script.
Is there a tool or a way to scan the LAN/Servers and get a clear output where these users accounts (Domain & Enterprise Admin) being used, especially windows services wise, and all other dependencies?
Can anybody help?
Regards,
MSK

Hello
As far as I have experienced by changing the enterprise admin password there will be no impact on the environment, not event on
Services.msc console. But resetting an account is a different story. If you change the user account, services which relies on the user will be updated automatically but by resetting the password you have to manually enter the password on each
service.
Also I am thinking about if you use remote desktop with saved credentials to connect to DC's as enterprise admin, you may experience account lockout problems. So wise move is to create another account as member of enterprise admins group and keep it safe
with a strong password and save it for a rainy day. In that case if the original enterprise admin locked out due to incorrect logons you have a gold key to overcome the situation.
Regards.
Mahdi Tehrani Loves Powershell
Please kindly click on Propose As Answer or to mark this post as
and helpfull to other poeple.

Restart required when I make changes to Connection Pools in Sun App Srv 9

When I make changes to the connection pool settings in Sun Application Server 9, i.e. when I change maximum connections or resize size, do I need to manually restart the domain? Is it a best practice to restart, or is it not needed at all?
Thanks!
Dailysun

no, changing the pool parameters like maxsize, steadypoolsize etc., does not need restart.
http://docs.sun.com/app/docs/doc/819-3658/6n5s5nkld?a=view#ablch
Thanks,
-Jagadish

Domain Suffix Deleted

We have an unusual problem where that one of our domain suffix's gets deleted every 30 days, we have the same domain suffix name in two separate forests but wouldn't have thought it would have caused the deletion. We are also using ADFS and have the trust
password set to change every 30 days...
Does anyone have any idea's as to how to resolve this annoying problem?
Thanks :)

I would recommend to make sure that your DCs and AD replication are in healthy state using
dcdiag and repadmin commands.
It might be also one of your scripts that is doing that. You can review the list of members
Enterprise Admins group as it might be running with the credentials of one of these accounts. Better to change the passwords of these accounts so that the script would fail next time.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Domain suffix of DB Links - where?

Hi!
How does oracle (9iR2) get the domain suffix of database links?
When I create a DB link named "test", i can see it as "test.domain"
I tried the parameter db_domain, but this has no influence. Neither has the file /etc/defaultdomain on the Solaris system.
Where does oracle get the domain suffix from, how can I change it?
Thanks
Stefan

The default domain is set in the sqlnet.ora
file (this file is normally in ORACLE_HOME/network/admin).
The relevant parameter in sqlnet.ora is
NAMES.DEFAULT_DOMAIN
Hope this helps.
Kailash.

Changing the internal domain to a subdomain -- Help!

Hello, so I have a huge project coming up and i was wondering if someone had some experience on this that could give me some advice.
So, started working on this company that has an internal domain called.. lets say abc.com and external alphabetaghama.org .. the problem we have is that we cannot get certs for our internal domain for public access like our exchange
server fqdn for example is exchange.abc.com ... Someone else owns abc.com which prompted my new boss to fix this and now i have a project to change our internal domain to match our external but I know that the best practice is to have a
subdomain as the internal domain and I think that's the route my boss wants to go with.. which brings me to my question.
What will I have to do to get this accomplished... our external domain name is really just a forward zone and i dont have a forest so does that mean that i will have to build a alphabetaghama.org forest and add a subdomain like corp.alphabetaghama.org
for our internal and then migrate everything over?
We currently have exchange 2007 with 2008R2 DC's.. our new domain would be on 2012R2 DCs with the same exchange server..
Sorry if something doesn't make sense, I'm a little new to a major project like this...

Hi,
This really depends on the requirements. As the Domain restructure is a huge project, we'd better have some experts with good experenses at hand. And if the problem (to get public access) is solved, it is recommended to have a good consideration
if the rebuilding is needed.
Regarding the internal domain name, maybe you want to have a look into the below MS article:
How Domain Rename Works
http://technet.microsoft.com/en-us/library/cc738208(v=WS.10).aspx
For your reference:
ADMT Guide: Migrating and Restructuring Active Directory Domains
http://technet.microsoft.com/en-us/library/cc974332(v=WS.10).aspx
One thing to mind is ADMT tool may cannot
be installed on a Windows Server 2012 DC, so please make sure in the target domain we have a Windows Server 2008 DC to be the ADMT server.
ADMT 3.2 and PES 3.1 installation errors on Windows Server 2012
http://support.microsoft.com/kb/2753560
Hope this may help
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Right Way to change MBOs Connections

Hellow Experts,
I'm really enjoying the communication here, and I got a new one.
Whats the right way of change MBOs Connections to SAP for instance?
I tried 2 methods.
Method One
Title: Its just too much Work
Proceeding:
I start rebinding every MBO and operatios to the new Connection.
Drawback:
If i have 1 MBO it may takes 30 seconds if they are 40 or 50 mbos it will take a lot of time.
there are the output tables from bapis are recreated if dont they are deleted.
so you have to reimplement all the operations one again. and it as the adicional
problem that we all can miss something and do something wrong.
Method Two
Title: Simpler way
Proceeding:
change the connection profile itself at workspace from DEV->QA or QA->PRD
Drawback:
supposing that you want independence between the apps connections like app1 is on DEV and ap 2 is on PRD.
this will led to N connections per N applications.
DEV: (Development)
QA: (Quality)
PRD: (Production)
I would like to know if you guys have more approaches and what you think of this ones.
Cheers,
Laguerta

Daniel Laguerta
I will never follow method one as suggested by you.
To add for the "Method 2", i will create a separate (new) workspace for different instance like DEV, QA, PROD.
eg. Once DEV is done, i ll export the whole project, and import the same in a new workspace for QA.
Create a new SUP QA and SAP connection profile
Change connection profile to each mbo and its operations.
And deploy to SUP QA Env
Still it is time consuming.
there is another method (should be preferable)
Deploying mbo package from SCC instead of creating workspace and connection profiles.
Deploying MBO from Sybase Control Center (SCC)
Regards,
JK

Failed to open the connection after changing the connection in CMC

Hi
Below are our environment details:
BOXI 3.1 SP3
Solaris Sparc 10
Crystal Reports 2008 Sp3
Weblogic 11g
Our team is facing the problem as described below:
We have created Crystal Reports using JDBC connection and it works fine
in an environment(SIT).
When we migrate these reports to the another environment(UAT) we get
the error "Failed to open the connection"
After migrating we indeed change the connection to Custom Database
Login Information in CMC.
So to troubleshoot we installed Crystal Reports in UAT environment and
had to perform Set DataLocation after which
the reports starting working fine.
Now when we are migrating reports to Production we have the same issue.
We cannot install Crystal Reports on Production this time and hence we
are stuck.
Please let us know if any known workaround or solution for the same.
Thanks
Kamal
Edited by: Kamalaksha Shetty on Nov 15, 2011 4:18 AM

Hi Meenal,
I am not 100% sure I understood the workaround of having Crystal Designer on the server. Can you connect from UAT designer to production and perform the same operation?
Check this KBA that describes this problem and a solution:
https://service.sap.com/sap/support/notes/1445067
Regards,
Julian

How to find the User who changed the connection settings

Hi Gurus,
I am basically a BW guy but i am looking at your precious Guidance in this issue.
We have a situation in our BW production system. The job loads are working fine till now but seems like someone has meddled with RFC connection with R/3 prod.
The connection between R/3 and BW is broken. I would like to know if there is any way to find the User or some Log to find who might have medelled with the RFC's .
Help is greatly appreciated.
Regards
satish M

Hello Satish,
Which release are you on?
Option 1: Take a look in SM59 selecting the destination and there is a "last changed" information displayed.
Option 2: the table for these connections are often not logged for table change logging, but if they are... then try transaction SCU3 on the backend tables (table RFCDES is a good start).
(search for rec/client and recclient etc as search terms).
Option 3: Why would someone change a connection? Try to analyze what happened during the time period after the change, or even immediately before the change (audit logs, system events, server statistics etc). A simple check would be via SM20 to see who started SM59 immediately prior to this. A more complex check would be analyzing the RFC profiles in ST03N.
Option 4: On the R/3 side, you might be able to find the same auditable information as well (perhaps even the IP address of the caller?) Tip: The person might have created a dump... => transaction ST22.
Option 5: There are some other additional logging, tracing and control possibilities at a deeper technical level, if used or active at that point in time.
Cheers,
Julius

Can't change the connection string of SSIS package with derived columns?

We upgraded SQL server 2008 to 2012, copied and converted all SSIS packages from Visual Studio 2008 to 2010. When I opened a package in VS 2010 and tried to change the connection string, in the local connection managers, if the data source is another
SSIS package B(.dtsx file) with derived columns, I can't change the connection string of package B. When I opened the file connection manager editor for package B and tried to locate a dtsx file in another location, saved the change, reopened the project.
Package B still pointed to previous file. Other packages without derived columns work fine. Any thoughts?

We are using the package deployment model and refer to other packages in the same project. If
we changed the path of package B (with derived columns) to "D:\Visual Studio 2010\xxxx", and refer it in package A, in the A's connection manager, the connection string of package B is still its previous location "D:\Visual
Studio 2008\xxxx". When we ran the package A in the SQL server agent, the data source is still
"D:\Visual
Studio 2008\xxxx", so how can I change it to "D:\Visual
Studio 2010\xxxx"? Why has the package C (without derived columns) no such problem? thanks.

ISE 1.2 Domain suffix

Hi.
I have a question regarding the domain suffix for the ISE 1.2 installation. I am about to install distrubuted ISE.
The domain name for my ISE nodes will be like this ISE1.XXX.BBB.YYY.LOCAL and ISE2.XXX.BBB.YYY.LOCAL and PKI infrastructure will push machine certificates to the endpoints with the same suffix client1.XXX.BBB.YYY.LOCAL. I will use the machine certificate on the endpoints to validate the EAP-TLS process.
The installation (WIRELESS ONLY):
EAP-TLS (SSIDX)
PEAP (SSIDX)
Guest Self Registration (SSIDC)
Will this kind of DNS suffix give any problems because I am not use best practice suffix like ISE1.mydomain.local? I also need to have public certificate for the guest SSID to avoid warning messages for the endpoints. Can the PSN nodes handle more than one DOMAIN NAME / DNS name?

In the ISE Under Administration > Identity Management > External Identity Sources
Choose Active Directory on the Left, Select your AD Server and select Advanced Settings
Under Identity Suffix Strip, Make sure Strip prefixes listed below: is selected (I know, it says prefix).
In the List of Suffixes box, enter your list of domain suffixes to strip. The separating character is a comma (,).
If this doesn't fix your issue, then I am afraid that a call to TAC may be in order.
*****UPDATE*****
Spaces are significant characters. When listing domains, do so as such:
@domain.com,@domain.local,@testdomain.com
*****END UPDATE*****
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton
Message was edited by: Charles Moreton

Changing the default domain name of the server.

I know this is not the correct title for the topic. but its the best word i could found on my voculabary.
here's my problem.
Im using Sun App Server 9. the server is installed in the local machine. for testing purposes client access from the local server is sufficient. I deployed a web service using net beans 5.5. My problem is that the WSDL file is generated (by server) uses a fully qualified domain name rather than localhost. for example it uses http://mlb.stdmlb.sliit.lk:8080. When i try to create a client using netbeans it tries to access the server using this address (the one in the WSDL) but the firewall denies access to port 8080. Therefore i want to use the server to use localhost rather than the long domai name. (at least http://mlb) Can anyone tell me how to configure this?
Lahiru

These are the steps for changing domain name & IP address without reinstall
a) Stop the Gateway and Server .
b) Export the profile server database to a flat ldif file:
# /opt/netscape/directory4/slapd-host_name/db2ldif /temp/profile.ldif
c) Use awk, perl, or vi, to change every instance of the system domainname in the ldif file to that of the new system.
d) Import the edited ldif file into the profile server on the new machine:
# /opt/netscape/directory4/slapd-/ldif2db -i /temp/profile.ldif
e) edit etc/opt/SUNWips/platform.conf and change all the domain name & Ip address
f) edit /etc/opt/SUNWips/properties.file change the domain name
g) Start the platform server and gateway on the new machine.

How to change the Credential domain Value in XML gateway?

How to change the Credential domain Value in XML gateway?
configured the XML Gateway trading partner . It is generating the header as given below. but need to change the Credential domain to DUNS.
<Header>
<From>
<Credential domain="olgridap1.lan">
<Identity>53369415-cxml</Identity>
</Credential>
</From>
Desired XML header
<Header>
<From>
<Credential domain="DUNS">
<Identity>53369415-cxml</Identity>
</Credential>
</From>

You might want to check WLP 10.3 & deployment plan & log4j.xml for a similar topic.

Change AD Connect domain suffix

Similar Messages

Maybe you are looking for