JSI Tip 5247. How do I Use the Active Directory Schema snap-in to manage certain functions of the Active Directory schema?

Jerold Schulman

April 29, 2002

5 Min Read
ITPro Today logo in a gray background | ITPro Today

NOTE: The text in the following Microsoft Knowledge Base article is provided so that the site search can find this page. Please click the Knowledge Base link to insure that you are reading the most current information.

Microsoft Knowledge Base article Q320337 contains:

IN THIS TASK

  • SUMMARY

  • How to Install the Active Directory Schema Snap-in

  • How to Use the Active Directory Schema Snap-in

  • Starting the Active Directory Schema Snap-in

  • Viewing a Class Definition

  • Viewing an Attribute Definition

  • Adding an Attribute to the Global Catalog

  • Indexing an Attribute in Active Directory

  • Enabling This Computer to Extend the Schema

  • Deactivating a Class or Attribute

  • Reloading the Schema

  • REFERENCES


SUMMARY

This step-by-step article describes how to use the Active Directory Schema snap-in to manage certain functions of the Active Directory schema.

CAUTION: Microsoft recommends that you use caution if you modify the Active Directory schema. This operation is an advanced operation that is best performed programmatically by experienced programmers and system administrators. For detailed information about how to modify the Active Directory schema, see the Active Directory Programmer's Guide that is available at the following Microsoft Web site:

If you want to make changes to the schema, remember the following key points:

  • Schema changes are global.

  • Schema extensions are not reversible (however, you can modify some attributes after you create them).

The entire forest shares a common schema. A copy of the schema exists on every domain controller in the forest. If you extend the schema, you extend the schema for the entire forest because any changes to the schema are replicated to every domain controller in every domain in the forest. One domain controller (the schema operations master) controls the modification and the extension of the schema.

After you add a new class or attribute to the schema, you can deactivate the class or attribute, but you cannot removed it. If you deactivate a class or attribute, you cannot create a new instance of this class or attribute. You cannot deactivate an attribute if it is included in any class that is not deactivated. To deactivate a class or attribute, see the Deactivating a Class or Attribute section of this article.

NOTE: If the Active Directory Schema snap-in is not available, install Windows 2000 Administration Tools from the Windows 2000 Server compact disc (CD), and then add the snap-in.

back to the top

How to Install the Active Directory Schema Snap-in

  1. Log on as an administrator.

  2. Insert the Windows 2000 Server CD into your CD drive, and then click Browse this CD.

  3. Double-click the I386 folder, double-click Adminpak, and then follow the instructions that are displayed in the Windows 2000 Administration Tools Setup wizard.

  4. Click Start, click Run, type mmc /a, and then click OK.

  5. Click Add/Remove Snap-in on the Console menu, and then click Add.

  6. Under Snap-in, double-click Active Directory Schema, and then click Close.

  7. If you have no more snap-ins to add to the console, click OK.

  8. To save this console, click Save on the Console menu.

  9. Type Schema Manager in the File name box, and then click Save.

back to the top

How to Use the Active Directory Schema Snap-in

The following sections describe how to use the Active Directory Schema snap-in to manage functions of the Active Directory schema.

Opening the Active Directory Schema Snap-in

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

back to the top

Viewing a Class Definition

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Double-click Classes.

  3. Right-click the class whose definition you want to view in the console tree, and then click Properties.

back to the top

Viewing an Attribute Definition

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Click Attributes.

  3. Right-click the attribute whose definition you want to view in the details pane, and then click Properties.

back to the top

Adding an Attribute to the Global Catalog

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Click Attributes.

  3. Right-click the attribute that you want to replicate to the global catalog in the Details pane, and then click Properties.

  4. Click Replicate this attribute to the Global Catalog.

    NOTE: If you add a new attribute to the global catalog, a full synchronization of all of the domain data from all of the domains in the forest occurs. In a large, multiple-domain forest, this synchronization may cause significant network traffic.

back to the top

Indexing an Attribute in Active Directory

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Click Attributes.

  3. Right-click the attribute that you want to index in the global catalog in the details pane, and then click Properties.

  4. Click Index this attribute in the Active Directory.

back to the top

Configuring This Computer to Extend the Schema

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Right-click Active Directory Schema, and then click Operations Master.

  3. Click The Schema may be modified on this domain controller.

back to the top

Deactivating a Class or Attribute

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Perform one of the following steps, depending on whether you want to deactivate a class or deactivate an attribute:

  • To deactivate a class, double-click Classes, right-click the class that you want to deactivate, and then click Properties.

  • To deactivate an attribute, double-click Attributes, right-click the attribute that you want to deactivate in the details pane, and then click Properties.

  • On the General tab, click either Deactivate this class or Deactivate this attribute as appropriate.



back to the top

Reloading the Schema

  1. Click Start, point to Programs, point to Administrative Tools, and then click Schema Manager.

  2. Right-click Active Directory Schema, and then click Reload the Schema.

back to the top

REFERENCES

For more information about the Active Directory schema, see the following Microsoft Web site:

back to the top

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like