Environment
Novell iFolder 2.1
Microsoft IIS
Microsoft Active Directory
Situation
When installing iFolder on a Windows Server using Active Directory,
the install process fails with an error (-81), failing to extend
the schema.
Resolution
There are two policy sets that should be altered, both use the
same set of steps. One is the Domain Controllers Security
Policy. The other is the Domain Security Policy. Both
of these are available from the Administration Tools of the start
menu. The process is :
- Open the Domain Controllers Management Console
- Expand the "Account Policies" key
- Click on the "Password Policy"
- The list of policy pieces will appear in the right hand pane
- For each of those policy pieces, select it and define the policy, but disable it. If the policy item is not defined, it will fall back to defaults, which are too restrictive
Once complete, restart the iFolder installation process.
Additional Information
Security Policies in Active Directory have prevented the schema
extensions. Failure to install the schema into Active
Directory can result when the default policies have been left, or
if tight policies have been implemented. Installing iFolder
into Active Directory requires the alteration of strict or default
password policies.