How to Enable Domain Controllers to Modify the Schema

ID: Q229691

The information in this article applies to:

Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Server

SUMMARY

Active Directory enables you to modify the schema at any domain controller in the enterprise using the Schema management console. With Active Directory, schema updates occur at exactly one domain controller in the enterprise at any given time. The domain controller that has permissions to perform schema updates at any given time is referred to as the Flexible Single Master Operation (FSMO) Schema-Master.

MORE INFORMATION

The FSMO Schema-Master can be chosen in the Schema management console by selecting Operations Master from the Active Directory Schema Manager. From this location, the present domain controller can be made a schema writable domain controller. The Schema Master computer should also have the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\ Schema Update Allowed REG_DWORD 0x00000001

If changes to the schema are made at a domain controller that is not a schema writable domain controller, the settings do not apply and a message is generated in the schema management console:

The displayable status could not be changed.

Additional query words: smallbiz bof bos 2000

Keywords : kbnetwork kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbhowto