Recombining Split Domains

Last reviewed: May 14, 1997
Article ID: Q112372
The information in this article applies to:
  • Microsoft Windows NT Advanced Server version 3.1

You cannot split a domain or rename a domain by changing the domain name on a server or a subset of servers in the domain.

Attempting to split a domain by renaming the domain on a subset of servers may work fine until one of the domains attempts to trust the other domain, or a third domain attempts to trust both of the split domains. Trust relationships do not work in this type of situation because the two domains share the same security ID (SID).

Windows NT must be reinstalled on some of the servers to split a domain or to combine domains.

If you have attempted to split a domain by changing the domain name on a subset of servers in the domain, recombine the domains by doing the following:

NOTE: In the following steps, the domain that will remain is referred to as Domain A and the domain that will be deleted is referred to as Domain B.

  1. Decide which domain will remain. Only one of the domains can stay.

  2. Create new accounts on Domain A to replace the accounts that will lost when Domain B is deleted.

  3. On domains that trust Domain B, remove that trust and make them trust Domain A. (See the Microsoft Windows NT Advanced Server "System Guide" for details.)

  4. On Domain A and all trusting domains, change Access Control Lists (ACLs) to replace references to the accounts on Domain B with references to the new accounts created on Domain A.

  5. Move all workstations on Domain B to Domain A.

  6. Demote the domain controller of Domain B.

  7. From the Server Manager of Domain A, remove all servers from Domain B (if they are still listed as members of Domain B) and add them to Domain A. Make sure the domain name on all Domain B servers are changed to match the name of Domain A.

  8. Start the servers that had been in Domain B. Allow enough time for replication from Domain A to take place, and then check the event log of each server to make sure each server successfully imported the account databases of Domain A.

Note that if domains are split or combined by changing the domain name on servers, trust relationships with other domains may need to be deleted and rebuilt. For information on broken trust relationships, see article Q112214 in the Microsoft Knowledge Base.


Additional query words: prodnt
Keywords : kbnetwork ntdomain
Version : 3.1
Platform : WINDOWS


THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: May 14, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.