Writable Schema Attribute???

[debonairOne]

I have put together a test Active Directory Environment. One of the requirements is to extend the schema with a company specific attribute... I created the attribute, went into the User class and added it as an optional attribute. Now, when one of the administrators uses ldapbrowser and assigns a value to this attribute, it works as expected. The problem is: they now wish to be able to edit this value on the fly... They find that once they write the value initially, it cannot be modified... How can I make this value editable? I have granted the admin account permissions to read/write everything on this attribute, but that doesn't help... What am I missing...?

This is on a Windows 2003 R2 domain controller.

debonairOne

I look in the mirror and what do I see...

 

[TechyMcSe2k]

put them in the Schema Administrators group

Hope you trust the people using this amin account

 

[debonairOne]

Ha, it's their environment, I'm the outsider, but it is only a development environment, so it doesn't really matter...

anyway, they will not have schema admin privs in production, so I wanted to find a way for them to have the necessary permissions or create the attribute so that a particular value can be written and rewritten... This is an attribute that I created and extended the schema with it... I made it available to the user class so that each user object would have this additional attribute as an optional value...

debonairOne

I look in the mirror and what do I see...

 

[debonairOne]

Well, it seems as though this was a non-issue... The IT guy was using a beta product to do this and was having issues... When he utilized another method, he was able to change the value of the attribute...

Thnxs anyway...

debonairOne

I look in the mirror and what do I see...