Appendix B: Updating the LDAP/LDAPS Schema295Setting the Registry to Permit Write Operations to the SchemaTo allow a domain controller to write to the schema, you must set aregistry entry that permits schema updates.To permit write operations to the schema:1. Right-click the Active Directory® Schema root node in the left pane ofthe window and then click Operations Master. The Change SchemaMaster dialog appears.2. Select the "Schema can be modified on this Domain Controller"checkbox. Optional3. Click OK.Creating a New AttributeTo create new attributes for the rciusergroup class:1. Click the + symbol before Active Directory® Schema in the left paneof the window.2. Right-click Attributes in the left pane.
