Resolution
goal
How does Directory and Resource Administrator handle extended schema?
fact
Directory and Resource Administrator 6.x
fact
Directory and Resource Administrator 7.x
fix
Directory and Resource Administrator (DRA) supports five of the default object classes in Active Directory. Those classes are Users, Computers, Groups, Contacts and Organizational Units.
If the schema is extended to include new or other attributes for any of these five classes, they will be recognized by DRA. Because of this, policies based on these attributes can be created for use within DRA.
Power over these extended attributes can be delegated to Assistant Admins by specifically granting them the All Properties power for that object class. For example, if the schema has been extended to add an attribute to the User class, the Assistant Admin must be granted the All Properties - Modify a User Account power to be able to manage the new attribute. Granting the All Properties power allows Assistant Admins to modify the new attributes using a custom GUI and/or scripts. DRA presently does not expose the extended properties in the standard user interface.
For information on available resources to customize DRA see the following Knowledge Base article:
- NETIQKB311: What is the Software Development Kit and what can it do?