AD: Guide to Create Custom Attribute to User Class

Pre-requisites

Make sure you login as member of Schema Admins.

To enable the Active Directory schema for the first time:

1. Open an Elevated Command Prompt.
   
   

Run the following command:

regsvr32 schmmgmt.dll

A confirmation message is displayed:

To create a new Attribute:

1. Once you've received the confirmation message, enter the command 'mmc' into the command prompt window to open up a new Microsoft Management Console window.
   
   
2. Choose File > Add or Remove Snap-ins then select the Active Directory Schema option. Double-click or click Add then click OK to load the Snap-in.

3. Once the Snap-in has been loaded, expand this out, right-click on the Attributes entry then select Create Attribute... to continue.

4. Please ensure you read and fully understand the warning as you will not be able to delete created attributes.

5. Please ensure you read and fully understand the warning as you will not be able to delete created attributes.

6. You can retrieve Unique X500 Object ID from here by running the oidgen.vbs.

 

To Add a new attribute to the User Class:

1. From the left-hand pane in the console, expand the Classes folder, locate the user class, then right-click and select Properties. The user Properties window is displayed.
   
   
2. Open the Attributes tab then click Add...
   
   
   
   
   
3. Search for the name of your new attribute, highlight this and click OK twice to save the change.
   
   
   
   

   Warning: These changes can take a few minutes to come into effect within your Active Directory.

   Restart Active Directory Domain Services for immediate effect in your lab. 




4. You will be able to update the data for this new field within the Attribute Editor tab of a users Active Directory entry.
   
   
   
   Learning something everyday !

Extending the Active Directory Schema

Two Method to extend the Active Directory Schema
A. Insert the Configuration Manager 2007 SP2 installation CD in the CD-ROM drive. In the \SMSSETUP\BIN\I386 folder you can find extadsch.exe
To ensure the operation successful, navigate to C: drive and open the ExtADSch.log file which was created in the root of drive C:

In the file you can observe the classes and attributed added to Active Directory and the message that confirms the successful extension of the schema.

B. Launch Command Prompt and enter the commands:

d: cd smssetup\bin\i386\extadsch

Where d: is the drive letter assigned to CD-ROM.
Ensure the output show : Successfully extended the Active Directory schema.

Update: 31/5/2012 Please log in as Schema Admin to perform this