Re: INFOSEC/NACOSA sec. templates and EXPANDING the AD SChema?

From: Javier J (no.mail_at_please.no)
Date: 04/27/05


Date: Wed, 27 Apr 2005 20:33:15 +0200

Hi!

First of all, thanks for the response.

In the end, the problem was not as "hard" as I feared.

These links:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/F071D557-8B24-4161-81E4-DAF63D39595A.mspx
(Enable schema changes on a schema master running Windows 2000)

and
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/regentry/93494.asp

gave us a hint of what to do.

Just "enabling" this key was enough to be able to expand the schema.
The rest was easy ;)

        Thanks a lot

On Tue, 26 Apr 2005 08:52:11 -0700, "Stephen Cartwright [MSFT]"
<scart@online.microsoft.com> wrote:

>You can use the Security Analysis and Configuration tool to compare the
>existing settings against the template you want to use. That should indicate
>where the differences are and what you might therefore need to "tweak" to
>get the desired settings.
>The NATO link you added, is that a local intranet link as its not visible.
>NATO is a company now :)
>Good luck.