How to add a custom attribute to an AD object

Question

We are trying to add a new attribute to AD groups similar to "Managed By" name attribute. We want to call it Approver or something similar. It would be like the "managed by" name attribute in that it would only allow AD user objects to be added, but would support multiple DN's instead of just the one.

Is this possible? Thanks!

Answer 1

Hello Hollister, Don,

Thank you for posting in Q&A forum.

You can create a custom attribute and add a custom attribute to an AD object as below.

1.Open MMC.exe-click File-click Add\Remove Snap-in-click Active Directory Schema.

2.Right click Attribute container- Create Attribute.

Tip – In order to open active directory schema snap-in you need to run command regsvr32 schmmgmt.dll from the Domain Controller. After that you can use MMC and add active directory schema as snap-in.

3.Check Multi-Valued option.

4.Click Class container- find group-open group Properties-link this custom attribute to group by click Add button and find this custom attribute and select this custom attribute, then click OK.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Follow https://www.rebeladmin.com/2017/11/step-step-guide-create-custom-active-directory-attributes/

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin