Question : How do I change my internal domain name to .local

My domain was set up as domain.int, this is incorrect as .int exists as an external domain (TLD) that we cannot register. This means I cannot get an SSL certificate for domain.int.

I would like to change my internal domain to domain.local, how can I do this, how hard is it and what problems could I come across?

I have 100 users, my DC is MS Server 2003, I have Exchange 2007 running on MS Server 2008.

Thanks.

Answer : How do I change my internal domain name to .local

You can work round this issue.
Request the certificate for your public name and the internal NETBIOS name of the server only.

Thus:

mail.example.com
autodiscover.example.com
server

Once you have the certificate, you can then change the internal URLs that Exchange will use. Setup a split DNS system so that mail.example.com resolves internally.

Then make the changes I have outlined in this article for a single name SSL certificate.
http://www.amset.info/exchange/singlenamessl.asp

You only need to do the internal URLs though, and can skip the SRV record stuff, because you have autodiscover in your certificate.

Simon.