Setting the Registry to Permit Write Operations to the Schema
Creating a New Attribute
To allow a domain controller to write to the schema, you must set a registry
entry that permits schema updates.
To permit write operations to the schema:
1. Right-click the Active Directory
window and then click Operations Master. The Change Schema Master
dialog appears.
2. Select the "Schema can be modified on this Domain Controller" checkbox.
Optional
3. Click OK.
To create new attributes for the rciusergroup class:
1. Click the + symbol before Active Directory
window.
2. Right-click Attributes in the left pane.
Appendix C: Updating the LDAP Schema
Schema root node in the left pane of the
®
Schema in the left pane of the
®
177