Level 1
0 / 100 XP

Extending the Active Directory Schema

This lab focuses on the process of extending the Active Directory schema to accommodate new application requirements, enhancing directory services functionality while ensuring data integrity and security. Participants will gain hands-on experience in schema modifications and best practices for managing directory objects.

Session duration: 60 minutes

Difficulty

Beginner

Lab level

Lab VMs

1

1 Windows

XP Reward

300 XP

On completion

Virtual machines

Lab VMs

Windows

SADC01

Windows

Username / Password

user / password123

Connection type

In-browser RDP / RDP

CPU / RAM

Lab instructions

Follow the steps below to complete the lab.

Before extending the Active Directory schema, you need to create a new user attribute. In this step, you will create an Active Directory User attribute called ServerAcademyID.

  1. Open the Active Directory Schema snap-in.
  2. Right-click on Attributes and select Create Attribute.
  3. In the dialog that appears, enter the following details:
    • Common Name: ServerAcademyID
    • LDAP Display Name: serverAcademyID
    • Attribute Syntax: Select String (for example, String (Unicode) or String (UTF-8))
  4. Click OK to create the attribute.
  5. Verify that ServerAcademyID appears in the list of attributes.

After completing the first step, you will now edit a custom Active Directory attribute for a user. In this step, you need to add an integer value of 215873 to the ServerAcademyID attribute for the user paulh.

  1. Open the Active Directory Users and Computers console.
  2. Locate the user paulh in the appropriate organizational unit (OU).
  3. Right-click on the user paulh and select Properties.
  4. In the Properties window, navigate to the Attribute Editor tab.
  5. Find the ServerAcademyID attribute in the list.
  6. Double-click on ServerAcademyID and enter the value 215873.
  7. Click OK to save the changes, then close the Properties window.

Use PowerShell to search for and retrieve the user attribute with the following command:

Powershell
Get-ADUser -Identity paul.hill -Properties ServerAcademyID

Ensure it is 215873