Tutorial: how to extend the AD architecture in MMC

In general, the first step we need to do when deploying ocs and exchange is to expand the AD architecture, but what will happen after the AD architecture is extended? After we deploy exchange, click the account we created-attributes to display the attributes related to exchange, and ocs will display attributes similar to those of the sip account. What is this principle?

In this article, I will give you a brief introduction.

The AD architecture option is not displayed by default in mmc at first. To see this option, enter regsvr32 schmmgmt in the Start Operation to enable this function.

Then open the AD architecture option in mmc.

We can see that there are two options in the architecture: Class 1, that is, the class we often call. The object and instance 2 attributes are the attributes of the object, we can simply check that it contains all our objects and attributes. For example, user class, name attribute.

In general, in actual application, the original attributes are far from enough for us to use. For example, when I was doing engineering at school, you need to add a student ID as the student ID. I will explain how to add a student ID attribute to the user to store the student ID information. The following describes how to extend the attributes of a user to add a student ID.

First, create a student ID attribute, right-click attribute new, and enter relevant information in the attribute field.
 

The ldap name is the name that we assign values through the program later. For x500 naming, pay attention to the naming rules of oidobject id). This naming rule is very troublesome. The name of China Region starts with 2.16.156 (China ), international Standards

After entering the relevant data, click OK.
The attribute belongs to the object. Here, we assign the student ID attribute we created to the user object.

Find the user in the category, and then choose "properties"> "add". Find the newly added property and click "OK.

 

How can we verify that this attribute has been assigned to the user?

We need to create a new user. Here I have created a user named li in ad after extension, and then we open adsiedit. Find the user li in the path and click Properties to view the added properties. Note: The manually added attributes are invisible to user and computer management and any other graphic interfaces. However, the extended attributes of exchange architecture can be viewed.
 

1. TCP/IP architecture model diagram in Windows Server 2003