Posts Tagged ‘Active Directory’

Editing the Active Directory Schema

Thursday, January 14th, 2010

I am currently studying for Microsoft exam 70-294 (hence a bit quite on the posts) and can across the very short section about how to access the schema.

This got me round to thinking, ‘How do you edit the schema, and how difficult can it be really?’. It turns out that it is not that difficult at all.

It is something that I had thought about at work, to be able to store information from SIMS about our students in the directory, like their admission number to give them a unique reference when creating and deleting accounts automatically.

I found the following two articles to be very useful. The MS article gave a good background, but the Depicus article filled in the gaps and provided you with sample scripts to get you going. These are easy to edit and I was quickly able to add in another field which stored the SIMS Admission Number in the directory.

http://technet.microsoft.com/en-us/library/bb727064.aspx#EBAA

http://www.depicus.com/articles/extending-the-active-directory-schema-for-enterprise-printer-support.aspx

Just to re-iterate before anyone does anything accidental – changes to the schema cannot be reversed. Make sure you thoroughly test anything that you want to change on a lab forest first, as changes to the schema cannot be deleted, only marked as inactive. You have been warned!

Back to messing around with Windows Server 2003 in preparation for the exam tomorrow.

FBA Using AD

Tuesday, September 22nd, 2009

Just working on Forms Authentication for SharePoint. Causing a bit of a headache to say the least.

The objective: Enable staff to access the Intranet from home on a specific URL, and sign in using their username and password with a graphical form, so that a disclaimer can be shown.

After some hunting I came across a thorough post here:

https://blogs.technet.com/nishants/archive/2009/05/22/how-to-configure-forms-based-authentication-active-directory-ldapmembership.aspx

This nearly works. Just got issues getting the users added in to the Policy for Web Application pages for the Alternate Access Mapping zone.

Will post if (and when) I get it to work!