AD - Unable to update Schema attribute

Arun Velusamy 21 Reputation points
2022-08-05T17:00:44.507+00:00

Hi, I need to update maximum value of an attribute Physical-Delivery-Office-Name in Schema. Current value is 128, new value I want to update is 512. First question is this possible?

Logged into Schema master DC
Using Schema admin role account
Updated the registry - HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters - REG_DWORD - Schema Update Allowed set to 1

I did all those but when I tried to update the value using MMC snap-in, I couldnt update the maximum value for Physical-Delivery-Office-Name.
I tried for few other attributes as well which I know we can edit the maximum value but none of them I could edit.

Am I missing something? Can someone help me how I can update the maximum value of this attribute?

Thanks, Arun

228566-image.png

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft System Center | Other
0 comments No comments
{count} votes

Accepted answer
  1. Gary Reynolds 9,621 Reputation points
    2022-08-05T23:02:48.277+00:00

    Hi @Arun Velusamy

    The simplest method is to use LDIFDE to update the value, here is a sample LDF file to change the rangeupper value:

    dn: CN=Physical-Delivery-Office-Name,CN=Schema,CN=Configuration,DC=<your domain>  
    changetype: modify  
    replace: RangeUpper  
    RangeUpper: 255  
    -  
      
    dn:  
    changetype: modify  
    add: schemaUpdateNow  
    schemaUpdateNow: 1  
    -  
    

    Update your domain name and save this as a text file

    Then use this command to update the schema:

    ldifde -i -f <filename>  
    

    Gary.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.