ID: q102476
In Windows NT, you can do the following:
In Windows NT Advanced Server domains, domain membership (whether as workstation or server) is represented by a special system and security (SAM) account on the domain and an LSA Secret Object on the workstation or server.
Both the account and the secret object contain a password that is used by the Netlogon services to set up a secure channel between the machines. Netlogon periodically changes the password (both in the Secret Object and for the account on the domain) to prevent the password from being discovered.
The account on the server is marked with a special bit (either WORKSTATION TRUST ACCOUNT or SERVER TRUST ACCOUNT). These accounts cannot be used to logon interactively, nor can they be used to set up a connection using NET USE. If this is attempted, an error will be returned, ERROR_NOLOGON_WORKSTATION_TRUST_ACCOUNT or ERROR_NOLOGON_SERVER_TRUST_ACCOUNT.
The LSA Secret Object is created by setup during the initial installation or when a workstation joins a domain. The initial password is the same as the computer name (in lowercase and truncated to 14 characters).
The SAM machine account is created by Server Manager when a workstation or server is added to the domain (or by Setup when an administratrive user name and password are specified). The password is the same as the computer name (in lowercase and truncated to 14 characters).
For Netlogon to start on a workstation or server, the passwords on the Secret Object and on the account on the domain must be the same.
The correct way to change the computer name of a workstation in a domain is as follows:
1. On the domain, run Server Manager to add a workstation with the new
name.
2. Choose the Network icon in Control Panel, and then leave the
current domain (join a workgroup of any name).
3. Change the computer name.
4. Reboot the computer.
5. Choose the Network icon in Control Panel, and then rejoin the
domain.
6. Reboot the computer.
7. On the Domain, run Server Manager and delete the old workstation
name.
1. On the domain, run Server Manager to add a server with the new
name.
2. Choose the Network icon in Control Panel, and then change the
computer name.
3. Reboot the computer.
NOTE: If you try to skip this step, Netlogon does not start on the
server.
4. On the server, run Server Manager and choose Synchronize With
Domain Controller from the Computer menu. This resets the passwords on
both the account and the Secret Object to the same password.
5. On the domain, run Server Manager and delete the old server name.
Additional query words: prodnt rename
Keywords : kbnetwork
Version : 3.1
Platform : WINDOWS
Last Reviewed: August 13, 1998