In case anyone is interested, we wrote a short paper on Active Directory attributes and their security. The paper shows how to create a new Active Directory attribute, add it to an existing container (user class), and configure its security using Active Directory control access rights. To perform each of the steps, the paper employs four different techniques: administration via the GUI, administration via the command line, scripting using the COM ADSI interfaces in VBScript, and programming using the DirectoryServices library in Visual Basic .NET. Add Attributes to your Active Directory Schema and Manage their Permissions Efficiently Philippe Lacoude & Rajnish Sinha Washington, D.C. April 2005 (Version 1.1) http://www.lacoude.com/docs/public/Attributes.aspx