• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1370
  • Last Modified:

URGNET: Active Directory Schema Snap-in for MMC (basic question)

When I click on Active Directory Schema, right click and select permissions, it will not let me change any of the permissions.

I am logged in as an Administrator, and I want to give the administrator group privelages to edit the schema
0
jjacksn
Asked:
jjacksn
  • 3
  • 2
  • 2
  • +1
2 Solutions
 
Christopher McKayMicrosoft Network AdministratorCommented:
Hi jjacksn,
You may have to take ownership of it first.
(go into properties, then select Permissions, then select advanced, then take ownership)

Hope this helps!

:o)

Bartender_1
0
 
JamesDSCommented:
jjacksn
Administrator does not have the rights by default. You need to add yourself to the Schema Admins groups

BE VERY CAREFUL schema changes are one way only on Windows 2000 and potential catastrophic.

Cheers

JamesDS
0
 
Christopher McKayMicrosoft Network AdministratorCommented:
jjacksn,
Sorry, that should be :
go into Properties, then select Security, then select advanced,the click on owner tab, then change the owner to you.

Hope this helps!

:o)

Bartender_1
0
Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

 
anupnellipCommented:
default Administrator r by default in schema admin group . but other administrator whome you create later r not in this group . either add the user you wnat to admin schema to this group or log in as administrator .
0
 
JamesDSCommented:
anupnellip

Sorry, you're right - to clarify

By default the domain administrator in the Forest root domain is a member of the schema admins group. Administrators created later and original administrators of the child domains are not member of the schema admins group

Cheers

James
0
 
jjacksnAuthor Commented:
I am the original Administrator account created when i installed the OS.  I am also the only computer in the Domain/Forrest.  Shouldn't I have rights by default according to what you are saying?
0
 
jjacksnAuthor Commented:
Also, when I select persmissions, It says that I can only view the other permissions, not chnage them.  Unfourtunately, I'm in the middle of updating it... so I will get back to you shortly when I can edit things.
0
 
jjacksnAuthor Commented:
"By default, all domain controllers permit Read access to the schema. A registry entry must be set on a domain controller to permit Write access to the schema on that domain controller. "
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/adschemasteps.asp

Do I need to change this?  If so, what is this registry key?
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now