How to create new AD attributes

Question

Have the need from sap team to add new Active directory attributes to user objects. How does one perform that for every user via powershell.
Here is what is being requested for every user object:
* DISTRICTNAME - (new -40 chars)
* REGION - (new - 12 chars)

Answer 1

You don't modify the individual objects in the directory, you modify the directory schema. Individual AD objects inherit the new attributes from the schema class you added them to.

Here's some good advice: set up a new server in a completely separate AD forest and verify that your changes do what you expect them to. If you screw it up, you can demote the server and try again. If you do this in a production environment and you make a mistake you're screwed.

Here's an example: 51121.active-directory-schema-update-and-custom-attribute.aspx

I wouldn't mess around with scripts, I'd use an LDIF file to do the work. It's easier to review the modification date before actually making the change.