Otdfbt

Multi tool use

How to get cool night-vision without lame drawbacks?

Impossible darts scores

Loss of power when I remove item from the outlet

Old sci-fi story: radiation mutated the animals, a boy loses a limb, but it's okay because "humans used to do great with only two arms"

When to remove insignificant variables?

What's the difference between a deep fryer and a chip pan?

Greeting with "Ho"

What is the origin of Scooby-Doo's name?

What is "industrial ethernet"?

How to make clear to people I don't want to answer their "Where are you from?" question?

How does a blind passenger not die, if driver becomes unconscious

Employer wants to use my work email account after I quit

Why do textbooks often include the solutions to odd or even numbered problems but not both?

Do I have to explain the mechanical superiority of the player-character within the fiction of the game?

Array initialization optimization

What does the hyphen "-" mean in "tar xzf -"?

What is the legal status of travelling with methadone in your carry-on?

Is it illegal to withhold someone's passport and green card in California?

If I wouldn't want to read the story, is writing it still a good idea?

Why does the Saturn V have standalone inter-stage rings?

Why do all the teams that I have worked with always finish a sprint without completion of all the stories?

Suggested order for Amazon Prime Doctor Who series

How can I politely work my way around not liking coffee or beer when it comes to professional networking?

Can you find x?

Best practice for adding additional fields to AD Schema?

Raising Functional Level of Child DomainNetwork connectivity requirements for Active Directory forestLimitations of Custom Fields in Active Directorynetbios domain renameDomain Upgrade: when it is necessary to do it through migration to a new forest/domain?Naming a new Active Directory forest - why is split-horizon DNS not recommended?When do you need a new AD forest, and when do you need a new tree?AD Best Practice for the connection specific DNS suffix network settingMaximum Length for Custom AD Schema Attribute NamesActive Directory full forest recovery - Doubts about obscure sentence in MS documentation

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

1

We have a few services that are connected to our domain through SAML and some other sync tools. We are looking at adding custom fields to the AD Schema to hold the data for these services (fields for primary group for a few services, separate fields for preferred first/last name, multi-entry field for e-mail aliases, etc...)

I would like to avoid using existing fields as they don't describe their contents and are finite.

I couldn't find any information regarding best practice for adding additional fields, other than a few warnings that it may break compatibility with upgrades. I have been able to add additional fields to the schema in my test environment and I didn't notice any issues, but I'd like to avoid stepping on any landmines this might bring down the road.

My main concern is that if I extend the schema I won't be able to raise the forest/domain operational level in the future when the schema is updated. Is this the case? Are there any best practices or common gotchas in regards to this?

windows active-directory

share|improve this question

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63

migrated from superuser.com Jun 5 at 19:38

This question came from our site for computer enthusiasts and power users.

add a comment | 

1

We have a few services that are connected to our domain through SAML and some other sync tools. We are looking at adding custom fields to the AD Schema to hold the data for these services (fields for primary group for a few services, separate fields for preferred first/last name, multi-entry field for e-mail aliases, etc...)

I would like to avoid using existing fields as they don't describe their contents and are finite.

I couldn't find any information regarding best practice for adding additional fields, other than a few warnings that it may break compatibility with upgrades. I have been able to add additional fields to the schema in my test environment and I didn't notice any issues, but I'd like to avoid stepping on any landmines this might bring down the road.

My main concern is that if I extend the schema I won't be able to raise the forest/domain operational level in the future when the schema is updated. Is this the case? Are there any best practices or common gotchas in regards to this?

windows active-directory

share|improve this question

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63

migrated from superuser.com Jun 5 at 19:38

This question came from our site for computer enthusiasts and power users.

add a comment | 

We have a few services that are connected to our domain through SAML and some other sync tools. We are looking at adding custom fields to the AD Schema to hold the data for these services (fields for primary group for a few services, separate fields for preferred first/last name, multi-entry field for e-mail aliases, etc...)

I would like to avoid using existing fields as they don't describe their contents and are finite.

I couldn't find any information regarding best practice for adding additional fields, other than a few warnings that it may break compatibility with upgrades. I have been able to add additional fields to the schema in my test environment and I didn't notice any issues, but I'd like to avoid stepping on any landmines this might bring down the road.

My main concern is that if I extend the schema I won't be able to raise the forest/domain operational level in the future when the schema is updated. Is this the case? Are there any best practices or common gotchas in regards to this?

windows active-directory

share|improve this question

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63

share|improve this question

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63

share|improve this question

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63

asked Jun 5 at 19:23

Nathan LadwigNathan Ladwig

63