Re: Venting...

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Buggin (Totally_Bug_OuT_at_hotmail.com)
Date: 05/13/04 

Date: Thu, 13 May 2004 15:13:09 -0400

Yes, I did use the AD Schema.mmc to lay out the permissions.

Yes, I am a member of the Scheme Admin Group.

I was told to use the extadsch.exe on the Primary Domain Controller, which I
did, but got errors. (look above)

I found my solution by adding and granting Full Access to the SMS Server
Computer Account in the System Management Container in Active Directory.

Now when I run the extadsch.exe on the PDC once again and I got different
results from my previous execution.

<05-13-2004 15:00:19> Modifying Active Directory Schema - with SMS
extensions.
<05-13-2004 15:00:19> DS
Root:CN=Schema,CN=Configuration,DC=xxxxxx,DC=xxxxxx,DC=com
<05-13-2004 15:00:19> Attribute cn=MS-SMS-Site-Code already exists.
<05-13-2004 15:00:19> Attribute cn=mS-SMS-Assignment-Site-Code already
exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-Site-Boundaries already exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-Roaming-Boundaries already exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-Default-MP already exists.
<05-13-2004 15:00:19> Attribute cn=mS-SMS-Device-Management-Point already
exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-MP-Name already exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-MP-Address already exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-Ranged-IP-Low already exists.
<05-13-2004 15:00:19> Attribute cn=MS-SMS-Ranged-IP-High already exists.
<05-13-2004 15:00:19> Class cn=MS-SMS-Management-Point already exists.
<05-13-2004 15:00:19> Class cn=MS-SMS-Server-Locator-Point already exists.
<05-13-2004 15:00:19> Class cn=MS-SMS-Site already exists.
<05-13-2004 15:00:19> Class cn=MS-SMS-Roaming-Boundary-Range already exists.
<05-13-2004 15:00:19> Successfully extended the Active Directory schema.

<05-13-2004 15:00:19> Please refer to the SMS documentation for instructions
on the manual
<05-13-2004 15:00:19> configuration of access rights in active directory
which may still
<05-13-2004 15:00:19> need to be performed. (Although the AD schema has now
be extended,
<05-13-2004 15:00:19> AD must be configured to allow each SMS Site security
rights to
<05-13-2004 15:00:19> publish in each of their domains.)

Thanx!
Steven~

"Karl M" <anonymous@discussions.microsoft.com> wrote in message
news:263B7D37-D4C9-4569-A5AB-31DA5D7637C4@microsoft.com...
> There are a couple of issues here that I am not sure if you followed.
> First, you need to allow the schema to be extended (use the Active
> Directory Schema mmc snap in to allow this). Next, are you a member of the
> schema admin group? Third, if you use exadsch.exe (i think I spelled that
> right) after you installed SMS, you may have to add the OU containers
> using ADSI. Also, make sure the System Container has the proper
> permissions applied to it prior to running exadsch.
>
> Hope this helps.

Relevant Pages

  • Re: Alter User for domain user
    ... that would make your default schema dbo. ... I kept myself as a member of the sysadmin fixed role, ... permissions. ...
    (microsoft.public.sqlserver.security)
  • Re: Event Log
    ... >> I was wondering what permissions I need to give to the identity my ... >> Currently, I'm unable to do so, however, if I make the account a member ... >> the admin group then I'm able to write to the event log. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Strange permission message
    ... Logging in as a member of the Admin group, I have full permissions on ... The second database has a routine where it inserts data into a table ...
    (microsoft.public.access.security)
  • Re: Changing groups
    ... pleaderb, sue, frank, ed are members of group projectb ... Everyone is a member of group user. ... depending on the file's permissions they can read and write the ... I do this all the time, using Samba. ...
    (Debian-User)
  • Re: Outside Users RDP into WS2008???
    ... Name it DL-Consultants ... Assign permissions on a resource to domain local group '. ... add any user account belonging to your consultants to become member of G-Consultants group. ... End disconnected session: ...
    (microsoft.public.windows.server.general)