As usual, for us, for all procedures that will change the state and configuration of our Active Directory services, we will base our AD DS schema extension with a prior plan in place to test and validate our results. Thus, we can make sure that the environment is functional after the schema extension and everything is stable as before.

Microsoft Windows servers have a great tool that we can use to generate a file (the LDIF file) with all our schema configurations: ldifde. To use this tool, we just need to be logged into a Microsoft Windows server (for example, 2008 R2) and execute the following script in a command-line prompt window:

C:\Users\Administrator.POA> cd Desktop
C:\Users\Administrator.POA\Desktop>ldifde –f old-adds-schema.ldif \ 
-d CN=Schema,CN=configuration,DC=poa,DC=msdcbrz,DC=eall,DC=com,DC=br
Connecting to "adds.poa.msdcbrz.eall.com.br"
Logging in as current user using SSPI
Exporting directory to file old-adds...