Extending the schema
Before we can do anything, we need to extend the Active Directory schema to support FIM CM.
Note
All schema changes in Active Directory should be planned carefully.
If we don't, Configuration Wizard will stop and tell us to extend the Active Directory schema if we try to run it.
Note
Remember that all modifications to the Schema require Schema Admins permissions.
If you look at the FIM 2010 R2 media in the \Certificate
Management\x64
folder, you will find a Schema
folder where you can run the script ModifySchema.vbs
.
If you just run ...
Get Microsoft Forefront Identity Manager 2010 R2 Handbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.