Step #5: Check the custom attribute configuration

Step #5: Check the custom attribute configuration

    You can use the ADSI Edit tool to check the properties of your custom attribute to confirm that it has been configured properly.

    1. On your Active Directory server, run the Command Prompt as an administrator.
    2. Enter the following command: adsiedit.msc

      Note:  If the ADSI Edit tool is not available, then you can register it by opening the Command Prompt as an administrator and running the following commands: regsvr32 adsiedit.dll then adsiedit.msc

    3. Connect to the "well known Naming Context": Schema.
    4. Locate the custom attribute and open Properties.
    5. Locate the following attributes, their values should match the following (as shown below):

      • attributeSyntax: = ( NOCASE_STRING )
      • searchFlags: 0X80 = ( CONFIDENTIAL )

      Correctly Configured:

      SearchFlags with Confidential value

      Warning: If the searchFlags attribute is not configured as CONFIDENTIAL (e.g., displays as INDEX), then you must configure it as CONFIDENTIAL.

      Incorrectly Configured:

      searchFlags with INDEX value