Group Policy not updating after domain name change

Question

Hello,

I recently changed our DC domain name. Mostly everything went well except for gp. I did use the gpfixup for both DNS and NB before ending rendom. The domain name has changed within gp however it won't let me gpupdate on the DC. It returns with the error:

"The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency {an account created on another domain controller has not replicated to the current domain controller).
Computer policy could not be updated successfully, The following errors were encountered:
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account, created on another domain controller has not replicated to the current domain controller)."

I ran the AD replication program and there are no issues in there. When I make a GPReport, the only thing that looks off is under the user details it still shows the old domain name and computer name. I am not sure how I would go about modifying these fields.

I am wondering if anyone has run into anything similar after renaming their domain.

Thanks for your time.

Answer 1

When the domain name changes I don’t think it updates the resolver and base domain on the controller itself, so you’ll need to manually change this for the machine to know where to look.

Assuming you’ve completed rendom
You’ll need to run; netdom computername DCName.oldfqdn /add:DCName.newfqdn
Once rebooted the OS should pickup the change.
Make sure that DNS resolution works correctly and update the policy configuration with gpfixup (belt and braces check as I know you’ve said you’ve done that above).

Hope that helps

Answer 2

Hello @j77483-0552 ,

Thank you so much for posting here.

If we rename the domain, the domain controllers will not be renamed. So we need to change it manually. For more details, please refer to:
https://www.rebeladmin.com/2015/05/step-by-step-guide-to-rename-active-directory-domain-name

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Best regards,
Hannah Xiong

Answer 3

Was there a fix to this? I am getting the same issue. Gpfixup was run successfully, but I can't access GPO. I was still left with the popup with the old domain name on it.