Updating active directory schema
The fact is that with good planning and understanding, extending the schema is actually pretty straightforward and should not induce a great amount of fear.There is a great article written by Brian Desmond that addresses this issue and goes into detail about planning for and designing schema extensions: Extending the Active Directory Schema.Tomorrow, I will walk through the process of adding custom classes and attributes to the schema with pure Windows Power Shell code.Many Active Directory administrators are often fearful of doing anything that requires changes to the schema in Active Directory.As with anything in IT, it is always good to have solid backup and restore plans for your Active Directory environment.Also, always test your changes in a development or test environment before you go hacking around in your production Active Directory environment.
By using the Get-ADRoot DSE cmdlet, we can find all kinds of cool information about our Active Directory environment.
You can set the is Defunct property on a schema object to True, and the class that had the attribute will no longer be able to use it.
For more information, see Deactivating Schema Objects.
He is a huge fan of Windows Power Shell, and he has been using it since it was first released as Monad.
Andy’s personal blog is Get-Power Shell, and his twitter handle is @andys146.