You can't easily recover a schema. If you make the changes to a single DC
that is segregated  from the rest so that it won't replicate you can have a
little safety in that you can rebuild that one or restore that one. But no
an auth restore of the schema is not possible (i.e. you can't roll back the
schema with normal mechanisms).

If the vendor doesn't supply the changes, then I would beat them until they
did. If that didn't work then I would recommend building a virtual single
domain forest and then running the update and seeing what got changed in the
schema. Use the ADschemaanalyzer from the R2 ADAM release to help out. Then
look at the changes carefully making sure that they used proper prefixes and
OIDs and linkids, etc. If they aren't registered with MS, I would be
extremely careful of what they are doing.

  joe

--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm 
 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Adeel Ansari
Sent: Monday, March 20, 2006 6:01 PM
To: [email protected]
Subject: [ActiveDir] Extending AD Schema

AD Guys and Gals, 

Is there is a way to backout of AD Schema extension?

We have a project that requires AD Schema extension. The vendor has a tool
that will make changes in AD schema automatically. However, we are little
conscious about it. Is it possible to export the current AD schema and then
make extension. Would it be possible to import it back again?

Can you guys/gals share your experience with schema extensions / updates?

Thanks,
Adeel

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to