Schema Updates Require Write Access to Schema in Active Directory

Article ID: 285172 - View products that this article applies to.
This article was previously published under Q285172
Notice
This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center
(http://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000)
is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy
(http://support.microsoft.com/lifecycle/)
.
Expand all | Collapse all

On This Page

SUMMARY

This article discusses schema updates.

IMPORTANT: This article contains information about modifying the Active Directory schema. If problems occur, a system backup, or reinstallation of your system, may be the only way to recover data.

CAUTION: You should use extreme caution when you make any changes to the Active Directory schema because the changes occur forest-wide, and you cannot remove objects and attributes that are added to the schema.

The extension or the modification of the Active Directory schema requires write access to the schema. This is enabled by means of the "Schema Update Allowed" registry key. Schema updates may be enabled by means of the Schema Management Console, or directly in the registry. The schema updates can only be enabled on the domain controller that holds the schema master role.
Back to the top | Give Feedback

MORE INFORMATION

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756
(http://support.microsoft.com/kb/322756/ )
How to back up and restore the registry in Windows

Schema updates may be enabled by means of the Schema Management Console or by editing the registry.

To Enable Schema Updates by Means of the Schema Management Console:

  1. At a command prompt, type:
    regsvr32 schmmgmt.dll
    NOTE: RegSvr32 has been successfully registered when a DllRegisterServer in schmmgmt.dll succeeded dialog box is displayed.
  2. Open a new management console by clicking Start, click Run, and then type:
    MMC
  3. On the Console menu, click Add/Remove Snap-in.
  4. Click Add to open the Add Standalone Snap-in dialog box.
  5. Click Active Directory Schema, and then click Add.
  6. "Active Directory Schema" is displayed in the Add/Remove snap-in. Click Close, and then click OK to return to the console.
  7. Click Active Directory Schema so that the Classes and Attributes sections are displayed on the right-hand side.
  8. Right-click Active Directory Schema and click Operations Master.
  9. Click to select the Schema may be modified on this Domain Controller check box. Click OK, and then exit the console.
The schema may now be updated on the domain controller that holds the schema operations master role.

To Enable Schema Updates by Means of the Registry:

It is not recommended to enable schema updates by directly editing the "Schema Update Allowed" registry key. Schema updates should be enabled through the console method, whenever possible. If for some reason the console method cannot be used, the following registry key may be edited directly:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters

To directly edit this registry key, perform the following steps:
  1. Click Start, click Run, and then in the Open box, type:

    regedit

    Then press ENTER.
  2. Locate and click the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
  3. On the Edit menu, click New, and then click DWORD Value.
  4. Enter the value data when the following registry value is displayed:
    Value Name: Schema Update Allowed
    Data Type: REG_DWORD
    Base: Binary
    Value Data: Type 1 to enable this feature, or 0 (zero) to disable it.
  5. Quit Registry Editor.
The schema may now be updated on the domain controller that holds the schema operations master role.

More Information:

Clicking to select the Schema may be modified on this Domain Controller check box in the console adds the "Schema Update Allowed" registry value if it is not present.

Clicking to clear the Schema may be modified on this Domain Controller check box sets the "Schema Update Allowed" registry value to zero, but it does not delete the value.

Further information about the Active Directory schema may be found in Chapter 4 of the Windows 2000 Server Distributed Systems Guide, which is part of the Windows 2000 Server Resource Kit.
Back to the top | Give Feedback

Properties

Article ID: 285172 - Last Review: February 28, 2007 - Revision: 2.6
APPLIES TO
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
Keywords: 
kbenv kbinfo kbregistry kbschema KB285172
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top