How to manually optimize the Active Directory schema
On the AD Schema master
At a command prompt, type:
regsvr32 schmmgmt.dll
NOTE: RegSvr32 has been successfully registered when a DllRegisterServer in schmmgmt.dll succeeded dialog box is displayed.
Open a new management console by clicking Start, click Run, and then type:
MMC
On the Console menu, click Add/Remove Snap-in.
Click Add to open the Add Standalone Snap-in dialog box.
Click Active Directory Schema, and then click Add.
Click on Attributes on Left pane
From the list
Find uidNumber -> Right click properties
Tick "Replicate this attribute to the Global Catalog"
Tick "Index this attribute in the Active Directory"
Click OK
Find gidNumber-> Right click properties
Tick "Replicate this attribute to the Global Catalog"
Tick "Index this attribute in the Active Directory"
Click OK
Find gecos
Tick "Replicate this attribute to the Global Catalog"
(No requirement for this or the following attributes to be indexed)
Click OK
Repeat for the attributes
unixHomeDirectory
loginShell
gidNumber
Optionally, you can also Replicate the following attributes to the Global Catalog
logonHours
accountExpires
pwdLastSet
lockOutTime
© 2025 One Identity LLC. ALL RIGHTS RESERVED. 이용 약관 개인정보 보호정책 Cookie Preference Center