Netbios name has a period and using NPS servers for 802.1x

Question

Hi.

I have an active directory domain called local.company, the NetBIOS name is localcompany.uk. The domain consists of x2 Windiws server 2008 R2 domain controllers and x2 Windows server 2008 R2 NPS servers which service connections for our radius clients for 802.1x.

I need to upgrade the entire environment to Windows Server 2019, however, the issue is that when I introduce a Windows Server 2019 NPS server and point the RADIUS clients to it no one can authenticate and within the event viewer of the NPS server is it saying that it cannot find the domain localcompany.uk, which is the NetBIOS name.

I doubt there is an easy way to rename the NetBIOS name in the environment, so I was wondering if there is a work around or does it mean we need to create an entirely new domain without a period in the NetBIOS name?

I understand that I need to raise the functional level above 2008, which it currently is, also I understand that I need to migrate over to DFSR for sysvol. The issue still remains on how to get a workaround for having a period in the NetBIOS name. That is my main query because it's not allowing authentication on NPS servers.

So far everywhere I've looked is reporting that I need to build an entirely new domain, which will be a massive job because there is over 200+ servers and Exchange in a Hybrid, so I would like to try and avoid migrating to an entirely new domain if possible.

Answer 1

Hi,

Welcome to Q&A platform.

My understanding is the NetBIOS name with period cannot be authenticated through NPS server since the NetBIOS name was recognized as a domain name by NPS server. If there is any misunderstanding, please correct me. Please kindly note that period was allowed in older operating systems, but Microsoft has discouraged using a period since Windows 2000.

Periods should not be used in Microsoft Windows 2000 or later versions of Windows. If you're upgrading a computer whose NetBIOS name contains a period, change the machine name.

Periods also shouldn't be used in Active Directory domains. If you are upgrading a domain whose NetBIOS name contains a period, change the name by migrating the domain to a new domain structure. Do not use periods in new NetBIOS domain names.

For more details regarding of NetBIOS name, please refer to the following link:

Naming conventions in Active Directory for computers, domains, sites, and OUs

Best Regards,
Sunny

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.