Re: Help Extending Schema
- From: "Joe Kaplan" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 18 Jun 2007 16:58:56 -0500
Unfortunately, modifying ADUC is pretty hard without the right programmer
skills. It is generally only done by ISVs and is rarely done by IT shops.
What most people do is write a web app to do this as it is easier to code
and easier to deploy as well (you need to install your ADUC mod dll on every
machine that you want to have it on and then must deal with bugs,
versioning, etc.).
A future version of ADUC is intended to be much easier to modify, but you
won't see that for a few years.
Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"PRSmith59" <PRSmith59@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1AC30D5E-CE66-4CB0-86F5-ED9A3713166F@xxxxxxxxxxxxxxxx
Hi Thanks for the reply
I can populate the field just fine. We are dumping the info into AD via
Oracle and our Oracle DBA was able to callout and populate the field. I
can
see the data if I do a find in ADUC and select the columns to display,
selecting employeeID. However I can't seem to call the info via dsquery
and I
also want to modify the ADUC so that when our support people open a user's
property box the field is displayed and editable
"M W" wrote:
Hello PRSmith59,
I am not sure if you are asking for instructions on populating the
attribute
or retrieving it. Yes you can script this using vbscript if required.
Else
you could use GUI tools like admodify
(http://www.gotdotnet.com/workspaces/releases/viewuploads.aspx?id=F5CBBFA9-E46B-4A7A-8ED8-3E44523F32E2)
or even command line tools such as dsmod and admod (http://joeware.net).
ADUC doesnt offer the ability to view all attributes (including those
that
can be configured for a user object). But there are means of extending
this
programmatically. ASsuming you are happy to populate and retrieve using
command
line tools, then native dsmod, dsquery should be sufficient.
you could use dsquery to set employeeid values like so.
dsmod user cn=user1,ou=myuserou,dc=domain,dc=local -empid ABC123XXX
Obviously replace the FQDN for the user and the ABC123XXX values
accordingly.
If you want to retrieve then do something like this
dsquery * cn=user1,ou=myuserou,dc=domain,dc=local -scope base -attr
employeeID
If you need to do batch updates then this gets a little more complicated.
This requires you have an input file of all the users and the relevant
employee
ids. The complexity occurs depending on whether your users can have
varyng
FQDNs based on the OU they are in. If they are all in one OU or
container,
then things are simpler.
Post if you need further help. I hope this is a good starting point
HTH
M@
Hi - We're trying to add the user's Employee ID number into AD. I see
there are already several attributes within the schema (employeeID &
employeeNumber) but I can't seem to load them with data and more
importantly add the fields to ADUC so they can be seen. I know someone
else must've done this already and I'm not a strong script writer by
any means so hoping someone can help.
I've been researching it and the Platform SDK eludes to it but also
says it requires C++ which really threw me as any script experience I
have is in VB. When i do a dsquery on the field (dsquery user -samid
username | dsget user -employeeID) I get the error employeeID is an
unknown parameter
Mucho Gracias in advance
.
- References:
- Re: Help Extending Schema
- From: M W
- Re: Help Extending Schema
- From: PRSmith59
- Re: Help Extending Schema
- Prev by Date: Re: Adding users to the power user group
- Next by Date: Re: AD Query - show computer members of a group
- Previous by thread: Re: Help Extending Schema
- Next by thread: Adding users to the power user group
- Index(es):
Relevant Pages
|
