Active Directory Cookbook for windows server 2003- P31:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | Table 10-2. Attributes of attributeSchema objects Attribute Description indexed and if it is used in ANR searches. systemFlags Integer representing additional properties of the attribute. Recipe Registering the Active Directory Schema MMC Snap-in Problem You want to use the Active Directory Schema snap-in for the first time on a computer. Solution Before you can use the Active Directory Schema snap-in you have to register the dynamic link library DLL associated with it. This can be done with the regsvr32 utility using the following command regsvr32 If the command is successful you ll see the following message DllRegisterServer in succeeded. Discussion Most of the Active Directory MMC snap-ins do not require that you manually register the associated DLL. Microsoft requires this with the Active Directory Schema snap-in due to the sensitive nature of modifying the schema. This doesn t actually do much to prevent users from using it but at least it isn t available by default. And regardless only members of the Schema Admins group have permission to modify the schema anyway so making this snap-in available should not pose much of a risk. The file is installed as part of or when a domain controller is promoted. If you want to use the Schema snap-in on a non-domain controller machine and you have not installed the package you ll need to specify the full path to when using regsvr32 which can be found in the i386 directory of a Windows Server CD. 311 See Also MS KB 320337 HOW TO Manage the Active Directory Schema in Windows 2000 and MS KB 326310 HOW TO Manage the Active Directory Schema in Windows Server 2003 Enterprise Edition Recipe Enabling Schema Updates This is necessary only when the Schema FSMO role owner is running Windows 2000. Problem You want to enable schema modifications on the Schema FSMO. This is a necessary first step before you can .
