Administrador de configuración de Windows Server 2016 Esquema de Directorio Activo

Administrador de configuración Servidor Windows 2016 Directorio activo Schema extend. We make it with GUI y PowerShell.

Con interfaz gráfica de usuario:

1. Mount DVD o *.iso with SCCM distributive. Ir a <drive letter>\ SMSSETUP\BIN\X64\ and execute extadsch.exe. After running check your C:\ root for file ExtADSch.log, open it, and make sure that the operation is complete successfully;

2. Find in all programs Editar y ejecutarlo. Botón derecho del ratón haga clic y seleccione Conéctate a;

3. Dejar por defecto, hacer clic DE ACUERDO;

4. Botón derecho del ratón hacer clic en CN=System y seleccionar New\Object;

5. Choose Container y haga clic Próximo;

6. En Valor ingresar System Management, hacer clic Próximo;

7. Hacer clic Finalizar;

8. Botón derecho del ratón click on the newly created container and select Propiedades;

9. Ir a the Security tab and click Agregar;

10. En Object Types seleccionar Computadoras, ingresa tu SCCM server name and click DE ACUERDO;

11. Colocar control total y haga clic DE ACUERDO;

By PowerShell:

Correr PowerShell con derechos de administrador;

To run extadsch.exe:

#Extend Schema

Start-Process -Filepath ('D:\SMSSETUP\BIN\X64\extadsch.exe') -Wait

Start-Sleep 30

#Confirm Schema Extension

$schema = [DirectoryServices.ActiveDirectory.ActiveDirectorySchema]::GetCurrentSchema()

start-sleep 5

$schema.RefreshSchema()

$schema.FindClass("mSSMSSite")

To create container and grant permissions:

Import-Module ActiveDirectory

$root = (Get-ADRootDSE).defaultNamingContext

if (!([adsi]::Exists("LDAP://CN=System Management,CN=System,$root"))) {

    $smcontainer = New-ADObject -Type Container -name "System Management" -Path "CN=System,$root" -Passthru        

}

$acl = get-acl "ad:CN=System Management,CN=System,$root"

$objGroup = Get-ADComputer -filter {Name -eq "<Your SCCM Server Name>"}

$All = [System.DirectoryServices.ActiveDirectorySecurityInheritance]::SelfAndChildren

$ace = new-object System.DirectoryServices.ActiveDirectoryAccessRule $objGroup.SID, "GenericAll", "Allow", $All

$acl.AddAccessRule($ace)

Set-acl -aclobject $acl "ad:CN=System Management,CN=System,$root"