Re: Add attribute to Active Directory

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Ryan Hanisco (rhanisco_at_flagshipis.com)
Date: 11/30/04 

Date: Mon, 29 Nov 2004 19:42:14 -0600

Wosully,

If you are talking about adding new attributes that aren't in the directory
you would be extending the schema. I would point out that this, while not
hard to do, should never be done lightly and without forethought.

To be able to do this, you will have to add yourself to the schema
administrators group -- no, neither Domain Admins or Enterprise Admins are
in this by default.

Secondly, I would caution against just adding attributes to the User class.
Instead create a new class (like employee) that inherits from the User base
class and add your attributes to that. 

-- 
Ryan Hanisco
MCSE, MCDBA
Flagship Integration Services
"wosully" <wosully@discussions.microsoft.com> wrote in message
news:61DFEBE1-AC19-4758-965A-52A1B1E6907D@microsoft.com...
> Does anyone know how to add an attribute top an active directory account
in
> Windows 2000, but make it so other users can not view the attribute?
>
> For example,  create a social security number attribute and hide it from
> most groups.
>
> -- 
> Semper Fi

Relevant Pages

  • Re: SMS_SITE_COMPONENT_MANAGER
    ... When extending the schema, is it done at the top-level domain or can it be ... I make the changes on the remote MP server and enter the WINS server address ... The Active Directory schema has not ...
    (microsoft.public.sms.admin)
  • Re: Extending the Schema
    ... extending the schema does NOT create the System Management ... System Management container and assign full control ...
    (microsoft.public.sms.setup)
  • Re: Extending schema
    ... simply extending the schema. ... The impact on replication depends a great deal on how much data you are ... The best thing to do to understand the impact to the DIT size is populate ...
    (microsoft.public.windows.server.active_directory)
  • RE: Automatic Site Code Discovery was unsuccessful
    ... Straight from the SMS FAQ: ... "If you have extended the Active Directory schema, ... Install Windows 2003 Server Ent. ... i just insatlled the SMS 2003 without extending the ...
    (microsoft.public.sms.admin)
  • Re: Extending the AD scema in a multi domain environment...
    ... Right - it's not JUST about extending the schema. ... > master for the forest. ... > As for "SMS Site" and AD Domains. ...
    (microsoft.public.sms.admin)