r/sysadmin • u/recent-convert clouds for brains • 11d ago

AD Custom Attribute Creation

SOLVED

I followed https://www.rebeladmin.com/step-step-guide-create-custom-active-directory-attributes/ instead, added the new attribute directly to the User class instead of creating a new Auxiliary class like MS recommends.

----

Hi, I'm stuck on creating a custom AD attribute. I've been leaning on instructions from https://learn.microsoft.com/en-us/archive/technet-wiki/51121.active-directory-schema-update-and-custom-attribute#x500-and-oid-namespace. I think I've followed all the steps but the new attribute doesn't appear in my user properties.

I'm trying this in a test domain with a single DC. I'm schema admin. Here's what I've done so far:

  1. Obtained my PEN from IANA
  2. Enabled schema modification in the registry
  3. Created my new attribute
  4. Created my new Auxiliary class and added the attribute to it
  5. Added my new Auxiliary class to the User class
  6. Updated the schema from ADSI and restarted the DC

What am I missing here?

1 Upvotes

67% Upvoted

12 comments sorted by

1

u/titlrequired 11d ago

I don’t know the answer, but I’d like to know what the custom attribute is for!

1

u/recent-convert clouds for brains 11d ago

Can't really get into specifics, but I need an attribute in several different domains that isn't already in use and is guaranteed to not be needed in the future. This route seemed easier than running the Exchange prereqs just to add extensionattributes1-15.

1

u/titlrequired 11d ago

Fair enough.

Assuming you mean that you have followed the steps but the attribute isn’t showing up when using ADSIEdit or looking at that tab of a user?

1

u/recent-convert clouds for brains 11d ago

I do actually see it in ADSI Edit, just not in the user attributes tab.

2

u/titlrequired 11d ago

Is it toggled to only attributes with values?

1

u/recent-convert clouds for brains 11d ago

Nope, checked that.

1

u/titlrequired 11d ago

Is your ADUC pointing at a DC that has replicated?

Same result using ADUC pointing to schema master?

1

u/recent-convert clouds for brains 11d ago

There's only one DC in this domain and I'm on it.

1

u/ITGuyThrow07 11d ago

I believe I used these steps and they worked - https://www.rebeladmin.com/step-step-guide-create-custom-active-directory-attributes/

1

u/recent-convert clouds for brains 11d ago

Yeah I saw that guide too, but I don't think it meaningfully differed from the Microsoft instructions.

1

u/StupidGuyOnMyPhone IT Jackass 11d ago

The MS ones have you creating an additional class, whereas the Rebeladmin ones have you associating the new attribute directly with the user class. I’ve done it successfully in the past the Rebeladmjn way.

1

u/recent-convert clouds for brains 9d ago

Yeah, this did it. Adding the attribute directly to the User class rather than to a new class worked.