Setting the Registry to Permit Write Operations to the Schema
Creating a New Attribute
To allow a domain controller to write to the schema, you must set a
registry entry that permits schema updates.
To permit write operations to the schema:
1. Right-click the Active Directory
the window and then click Operations Master. The Change Schema
Master dialog appears.
2. Select the "Schema can be modified on this Domain Controller"
checkbox. Optional
3. Click OK.
To create new attributes for the rciusergroup class:
1. Click the + symbol before Active Directory
of the window.
2. Right-click Attributes in the left pane.
Appendix H: Updating the LDAP Schema
Schema root node in the left pane of
®
Schema in the left pane
®
589