First question re: schema change. You need to enable schema changes by fiddling the registry on the Schema master HKLM/SYSTEM/CCS/Services/NTDS/Parameters/Schema Update Allowed. It is a DWORD, and you should set it to 1 to enable schmea updates. You can do the same thing using the schema MMC, but I'm not sure where it shows up.
Second question re: lockout. If you want to find out if a user is locked out, you have to check all the DCs in the user's domain and check the userAccountControl attribute and see if the 0x0010 bit (UF_ACCOUNT_LOCKOUT) bit is set. If you want to find which DC initiated th lockout, I think you have to look at the event logs on the DCs where the bit is set. -gil -----Original Message----- From: Hutchins, Mike [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 20, 2002 10:44 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] All you DEC attendees What was the way to determine where someone was logged in and had the ws/server locked? (account Lockout)? -----Original Message----- From: Dave Kinnamon [mailto:[EMAIL PROTECTED]] Sent: Friday, November 15, 2002 8:57 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Another Schema - OU question I am currently trying to make a schema change which will allow me to create OUs under one of the default containers (Users) as is described in http://support.microsoft.com/default.aspx?scid=kb;EN-US;224377 I am a member of Schema Admins, Enterprise Admins, Domain Admins in my single-domain forest. When I try to apply the change I get the error message "The change was rejected by the directory service". Same result if I use a different account with the same priviledges. Any ideas? Dave List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
