1dent1ty cHa0s

I recently had to do another very painful round of custom AD schema extensions and the following are invaluable.

Reference

• http://www.iana.org/cgi-bin/enterprise.pl
• http://msdn.microsoft.com/library/en-us/ad/ad/extending_the_schema.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/what_you_must_know_before_extending_the_schema.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/how_to_extend_the_schema.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/defining_a_new_attribute.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/defining_a_new_class.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/characteristics_of_attributes.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/choosing_a_syntax.asp
• http://msdn.microsoft.com/library/en-us/ad/ad/linked_attributes.asp
• http://msdn.microsoft.com/library/en-us/adschema/adschema/active_directory_schema.asp
• http://msdn.microsoft.com/library/en-us/adschema/adschema/a_searchflags.asp
• http://msdn.microsoft.com/library/en-us/adschema/adschema/a_systemflags.asp
• http://www.lacoude.com/docs/public/Attributes.aspx
• "Hiding (Confidential) Data in Active Directory", Guido Grillenmeier (DEC 2006)

You should also take a look at the following previous posts on the subject:

• http://www.identitychaos.com/2006/09/miis-solutions-designing-effective.html
• http://www.identitychaos.com/2006/09/miis-solutions-designing-effective_25.html
• http://www.identitychaos.com/2006/10/miis-solutions-designing-effective.html

If you can find Guido's presentation it is certainly worth it and is the best treatise I've read on the subject for sure.