JSI Tip 5247. How do I Use the Active Directory Schema snap-in to manage certain functions of the Active Directory schema?
April 29, 2002
NOTE: The text in the following Microsoft Knowledge Base article is provided so that the site search can find this page. Please click the Knowledge Base link to insure that you are reading the most current information.
Microsoft Knowledge Base article Q320337 contains:
IN THIS TASK
SUMMARY
How to Install the Active Directory Schema Snap-in
How to Use the Active Directory Schema Snap-in
Starting the Active Directory Schema Snap-in
Viewing a Class Definition
Viewing an Attribute Definition
Adding an Attribute to the Global Catalog
Indexing an Attribute in Active Directory
Enabling This Computer to Extend the Schema
Deactivating a Class or Attribute
Reloading the Schema
REFERENCES
SUMMARY
This step-by-step article describes how to use the Active Directory Schema snap-in to manage certain functions of the Active Directory schema.
CAUTION: Microsoft recommends that you use caution if you modify the Active Directory schema. This operation is an advanced operation that is best performed programmatically by experienced programmers and system administrators. For detailed information about how to modify the Active Directory schema, see the Active Directory Programmer's Guide that is available at the following Microsoft Web site:
If you want to make changes to the schema, remember the following key points:
Schema changes are global.
Schema extensions are not reversible (however, you can modify some attributes after you create them).
The entire forest shares a common schema. A copy of the schema exists on every domain controller in the forest. If you extend the schema, you extend the schema for the entire forest because any changes to the schema are replicated to every domain controller in every domain in the forest. One domain controller (the schema operations master) controls the modification and the extension of the schema.
After you add a new class or attribute to the schema, you can deactivate the class or attribute, but you cannot removed it. If you deactivate a class or attribute, you cannot create a new instance of this class or attribute. You cannot deactivate an attribute if it is included in any class that is not deactivated. To deactivate a class or attribute, see the Deactivating a Class or Attribute section of this article.
NOTE: If the Active Directory Schema snap-in is not available, install Windows 2000 Administration Tools from the Windows 2000 Server compact disc (CD), and then add the snap-in.
back to the top
How to Install the Active Directory Schema Snap-in
Log on as an administrator.
Insert the Windows 2000 Server CD into your CD drive, and then click Browse this CD.
Double-click the I386 folder, double-click Adminpak, and then follow the instructions that are displayed in the Windows 2000 Administration Tools Setup wizard.
Click Start, click Run, type mmc /a, and then click OK.
Click Add/Remove Snap-in on the Console menu, and then click Add.
Under Snap-in, double-click Active Directory Schema, and then click Close.
If you have no more snap-ins to add to the console, click OK.
To save this console, click Save on the Console menu.
Type Schema Manager in the File name box, and then click Save.
back to the top
How to Use the Active Directory Schema Snap-in
The following sections describe how to use the Active Directory Schema snap-in to manage functions of the Active Directory schema.
Opening the Active Directory Schema Snap-in
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
back to the top
Viewing a Class Definition
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Double-click Classes.
Right-click the class whose definition you want to view in the console tree, and then click Properties.
back to the top
Viewing an Attribute Definition
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Click Attributes.
Right-click the attribute whose definition you want to view in the details pane, and then click Properties.
back to the top
Adding an Attribute to the Global Catalog
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Click Attributes.
Right-click the attribute that you want to replicate to the global catalog in the Details pane, and then click Properties.
Click Replicate this attribute to the Global Catalog.
NOTE: If you add a new attribute to the global catalog, a full synchronization of all of the domain data from all of the domains in the forest occurs. In a large, multiple-domain forest, this synchronization may cause significant network traffic.
back to the top
Indexing an Attribute in Active Directory
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Click Attributes.
Right-click the attribute that you want to index in the global catalog in the details pane, and then click Properties.
Click Index this attribute in the Active Directory.
back to the top
Configuring This Computer to Extend the Schema
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Right-click Active Directory Schema, and then click Operations Master.
Click The Schema may be modified on this domain controller.
back to the top
Deactivating a Class or Attribute
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Perform one of the following steps, depending on whether you want to deactivate a class or deactivate an attribute:
To deactivate a class, double-click Classes, right-click the class that you want to deactivate, and then click Properties.
To deactivate an attribute, double-click Attributes, right-click the attribute that you want to deactivate in the details pane, and then click Properties.
On the General tab, click either Deactivate this class or Deactivate this attribute as appropriate.
back to the top
Reloading the Schema
Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.
Right-click Active Directory Schema, and then click Reload the Schema.
back to the top
REFERENCES
For more information about the Active Directory schema, see the following Microsoft Web site:
back to the top
About the Author
You May Also Like