Microsoft KB Archive/313992

= HOW TO: Add an Attribute to the Global Catalog in Windows 2000 =

PSS ID Number: 313992

Article Last Modified on 12/3/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional
 * Microsoft Small Business Server 2000

-



This article was previously published under Q313992



IN THIS TASK

 * SUMMARY
 * ** Add an Attribute to the Global Catalog
 * Index an Attribute in Active Directory
 * REFERENCES



SUMMARY
This step-by-step article describes how to add an attribute to the global catalog. By using the Active Directory Schema, you can specify additional attributes to be kept in the global catalog. This helps to speed up search queries across a domain for an attribute that is not included by default in the global catalog.

IMPORTANT: Adding a new attribute to the global catalog causes a full synchronization of all object attributes that are stored in the global catalog (for all of the domains in the forest). Because of this, in a large, multidomain forest, the addition of global catalog attributes will cause this one-time synchronization, and this could result in significant network traffic.

The global catalog provides fast and efficient searches that extend across the entire Active Directory forest. Every domain controller (DC) holds a read/write full replica of all objects in the domain for which it is a member, and if it is also a global catalog, it also holds a read-only partial replica (all objects but only a partial attribute set) of its domain, and every other domain in the forest. Because of this, the global catalog makes directory structures in a forest transparent to end users, creating a search mechanism that makes finding objects in the directory uncomplicated and efficient.

By default, the partial set of attributes that are stored in the global catalog includes those attributes that are most frequently used in search operations. While most attributes are already included in the global catalog, and the majority of administrators will not need to make any changes, by adding additional attributes, you can speed up search queries across a domain for an attribute that is not included by default. For example, you can add a Fax number attribute for User objects, so that end users can easily search for other user's fax numbers in the directory. However, because editing the Schema affects all domains in the forest, making changes should only be considered by experienced administrators.

For additional information about what attributes are included in the global catalog by default, click the article number below to view the article in the Microsoft Knowledge Base:

256938 Default Global Catalog Attributes in Windows 2000 Active Directory Schema

back to the top

Add an Attribute to the Global Catalog
IMPORTANT: Adding a new attribute to the global catalog causes a full synchronization of all of the domain data from all of the domains in the forest. In a large, multi-domain forest, this synchronization can cause significant network traffic.

Modifying the Schema also requires that a person be a member of the Schema Administrators group.

To add an attribute to the global catalog:
 * 1) Open the Active Directory Schema.
 * 2) In the console tree, click Attributes.
 * 3) In the Details pane, right-click the attribute that you want to replicate to the global catalog, and then click Properties.
 * 4) Click Replicate this attribute to the Global Catalog.

NOTE: If the Active Directory Schema is not available, you must install the Windows 2000 Administration Tools from the Windows 2000 Server CD-ROM, and then add it to an Microsoft Management Console (MMC) console. To install the Windows 2000 Administrative tools, run Adminpak.msi from the %systemroot%\System32 folder. Once the additional administrative tools are installed, you can add the Active Directory Schema snap-in to the MMC. For additional information about how to install the Windows 2000 Administration Tools, click the article number below to view the article in the Microsoft Knowledge Base:

216999 How to Install the Remote Server Administration Tools in Windows 2000

For additional information about how to make the Schema Master available for viewing and editing, click the article numbers below to view the articles in the Microsoft Knowledge Base:

279978 Error Message: You Do Not Have Sufficient Access to the Active Directory

216060 Registry Modification Required to Allow Write Operations to Schema

back to the top

Index an Attribute in Active Directory
To index an attribute in Active Directory:
 * 1) Open the Active Directory Schema.
 * 2) In the console tree, click Attributes.
 * 3) In the Details pane, right-click the attribute that you want to index in the global catalog, and then click Properties.
 * 4) Click Index this attribute in the Active Directory.

NOTE: If the Active Directory Schema is not available, you must install the Windows 2000 Administration Tools from the Windows 2000 Server CD-ROM, and then add it to an Microsoft Management Console (MMC) console. To install the Windows 2000 Administrative tools, run Adminpak.msi from the %systemroot%\System32 folder. Once the additional administrative tools are installed, you can add the Active Directory Schema snap-in to the MMC. For additional information about how to install the Windows 2000 Administration Tools, click the article number below to view the article in the Microsoft Knowledge Base:

216999 How to Install the Remote Server Administration Tools in Windows 2000

back to the top

