In case anyone is interested, we wrote a short paper on Active Directory attributes and their security. The paper shows how to create a new Active Directory attribute, add it to an existing container (user class), and configure its security using Active Directory control access rights. This should be relevant to Exchange gurus who are probably the MS techies most likely to modify the AD schema. To perform each of the steps, the paper employs four different techniques: administration via the GUI, administration via the command line, scripting using the COM ADSI interfaces in VBScript, and programming using the DirectoryServices library in Visual Basic .NET. Add Attributes to your Active Directory Schema and Manage their Permissions Efficiently Philippe Lacoude & Rajnish Sinha Washington, D.C. April 2005 (Version 1.1) http://www.lacoude.com/docs/public/Attributes.aspx
Without the broken link: http://www.lacoude.com/docs/public/Attributes.aspx
I can do it. ;-) http://www.lacoude.com/docs/public/Attributes.aspx