{"id":9914,"date":"2024-09-03T13:03:30","date_gmt":"2024-09-03T13:03:30","guid":{"rendered":"https:\/\/cheapwindowsvps.com\/blog\/how-to-configure-multiple-alternate-dns-names-for-a-windows-computer\/"},"modified":"2025-01-20T09:55:11","modified_gmt":"2025-01-20T09:55:11","slug":"how-to-configure-multiple-alternate-dns-names-for-a-windows-computer","status":"publish","type":"post","link":"https:\/\/cheapwindowsvps.com\/blog\/how-to-configure-multiple-alternate-dns-names-for-a-windows-computer\/","title":{"rendered":"How to Configure Multiple Alternate DNS Names for a Windows Computer"},"content":{"rendered":"

In scenarios involving system migration, accessing Windows servers by both the original and new hostnames is often crucial. To make a server recognizable by an alternate name, the most straightforward method involves adding a CNAME alias in the DNS that points to the original FQDN (A record).<\/p>\n<\/p>\n

To establish a CNAME alias for the former hostname, you can use the DNS Manager console by launching dnsmgmt.msc<\/code> or employ the PowerShell command Add-DnsServerResourceRecordCName<\/a>:<\/p>\n<\/p>\n

Add-DnsServerResourceRecordCName -ZoneName woshub.loc -Name new-wks11 -HostNameAlias wks11.woshub.loc<\/code><\/p>\n<\/p>\n

However, a critical issue arises after setting up a DNS alias; Kerberos authentication fails when accessing the server via its new hostname. This failure occurs because the SPN (Service Principal Name) in the AD object isn’t updated when the DNS record is created.<\/p>\n<\/p>\n

Windows Server includes a native tool called netdom.exe<\/strong> that helps in adding an additional hostname. For instance, to assign a secondary hostname to the computer named fs01<\/em>, you would execute the following command with an alternative FQDN:<\/p>\n<\/p>\n

netdom computername fs01 \/ADD new-fs01.woshub.loc<\/code><\/p>\n<\/p>\n

Ensure the newly assigned name is also registered in the DNS using the command:<\/p>\n<\/p>\n

ipconfig \/registerdns<\/code><\/p>\n<\/p>\n

The netdom command will register a CNAME record in DNS, add the new name to the AlternateComputerNames<\/em> registry parameter (described below), and update the value of the servicePrincipalName<\/code> and msDS-AdditionalDnsHostName<\/code> attributes for the computer account in AD.<\/p>\n<\/p>\n

List all registered computer names:<\/p>\n<\/p>\n

netdom computername m-dc01 \/enum<\/code><\/p>\n<\/p>\n

Get registered SPNs for a computer account:<\/p>\n<\/p>\n

“`html<\/p>\n

setspn.exe -L fs01<\/code><\/p>\n<\/p>\n

The netdom.exe command is missing in Windows 10 and 11, so you’ll need to change the registry to add an additional hostname manually.<\/p>\n<\/p>\n

To add an alternate DNS name:<\/p>\n<\/p>\n

    \n
  1. Under the HKLMSystemCurrentControlSetServicesDNSCacheParameters<\/code> registry key, create a REG_Multi_SZ parameter called AlternateComputerNames<\/strong>.<\/li>\n
  2. Specify an additional FQDN name (or multiple names) for this (one FQDN per line)<\/li>\n
  3. Register computer names in DNS: ipconfig \/registerdns<\/code><\/li>\n
  4. Add the new computer name to the SPN:
    SETSPN -a host\/new-wks11 wks11
    SETSPN -a host\/new-wks11_name.woshub.loc wks11<\/code><\/li>\n<\/ol>\n

    “`<\/p>\n

    To set up an additional NetBIOS name on a computer, initiate by generating the OptionalNames<\/strong> parameter (REG_Multi_SZ) in the HKLMSystemCurrentControlSetServicesLanManServerParameters<\/code> registry key.<\/p>\n

    Proceed by rebooting the lanmanserver service with the following commands:<\/p>\n

    net stop lanmanserver
    net start lanmanserver<\/code><\/p>\n

    Should there be issues updating the computer\u2019s SPN in AD, establish a REG_DWORD parameter named DisableStrictNameChecking<\/strong> at HKLMSystemCurrentControlSetServicesLanmanServerParameters<\/code> and assign it a value of 1<\/strong>. This adjustment permits access to shared SMB folders on the computer using the new name.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"

    In scenarios involving system migration, accessing Windows servers by both the original and new hostnames is often crucial. To make a server recognizable by an alternate name, the\u2026<\/p>\n","protected":false},"author":1,"featured_media":9915,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[99,108],"tags":[],"class_list":["post-9914","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows-11","category-windows-server-2022"],"_links":{"self":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts\/9914","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/comments?post=9914"}],"version-history":[{"count":1,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts\/9914\/revisions"}],"predecessor-version":[{"id":10309,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/posts\/9914\/revisions\/10309"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/media\/9915"}],"wp:attachment":[{"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/media?parent=9914"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/categories?post=9914"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapwindowsvps.com\/blog\/wp-json\/wp\/v2\/tags?post=9914"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}