Прочитать на английском

Поделиться через

ConfigMgr 2007: What if I don't extend my Active Directory schema?

  • Статья

Extending the Active Directory schema for Configuration Manager 2007 allows clients to retrieve many types of information related to Configuration Manager from a trusted source. In some cases, there are workarounds for retrieving the necessary information if Active Directory is not extended, but they are all less secure than querying Active Directory. The best practice for configuring a secure site is to always extend the Active Directory schema.

Additionally, not extending the schema for features where it is recommended might incur significant workload on other administrators who will need to create and maintain the workaround solutions such as logon scripts and Group Policy objects (GPO) for systems and users in your organization.

So what exactly are the issues and workarounds if you don't extend the schema?  Read here to find out:

https://technet.microsoft.com/en-us/library/bb694066.aspx.

J.C. Hornbeck

Comments

  • Anonymous
    January 01, 2003
    thank you