Sounds like you're on the right track. To enable writes to the schema, have a look at the following article.
http://support.microsoft.com/?kbid=285172 BTW, it is good practice to keep the membership of the Schema Admins group empty and only populate it when you need to. This prevents any unintentional updates from, for example, 3rd party applications. Have you considered using VMWare for testing your schemea updates. The snapshot feature in version 4 is great as it allows you to revert to a saved version if something goes awry with your update. Tony ---------- Original Message ---------------------------------- From: Jeffrey Dubyn <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sat, 07 Jun 2003 19:42:27 -0400 These are very good points - it is being done on a workstation, not the server that is the Schema Master. The user is part of the Enterprise Admin group, but I don't think the script changes the schema to read-write first. I'll let you know how I make out on Monday. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Saturday, June 07, 2003 2:01 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Error message when attempting to modify the AD Schema Is the schema addition / expansion being done on the schema master, and - more importantly - have you enabled writes to the schema? By default, Enterprise Admin and members of that group are the only SP's that have permissions to the schema. Secondly by default, the schema is read-only. It meust be changed to a read-write status. It's not absolutely necessary to do your schema work on the master, but it does prevent potential conflicts and erros that you would otherwise not see. And - many applications DO REQUIRE the expansion be done on the master. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeffrey Dubyn Sent: Saturday, June 07, 2003 11:01 AM To: [EMAIL PROTECTED] Working in a test Windows 2000 Active Directory environment. In order to utilize a 3rd party application, I have to modify the Active Directory schema. Anyone have any idea what this error means? "ldap_add: DSA is busy ldap_add: additional info: 000020AE: SvcErr: DSID-030A05EC, problem 5001 (BUSY), data 0" The entire environment is only being used for this test, so there is no load on any of the systems, hence I can't see what is causing it to be busy. Unfortunately, I can't seem to find any documentation on the error. Thanks! List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
