If you intend to use Microsoft Provisioning System (MPS) to configure permissions, you must configure Active Directory to be in List Object mode.

You use Active Directory Service Interfaces (ADSI) Edit to set Active Directory to List Object mode. ADSI Edit is an MMC snap-in that acts as a low-level editor for Microsoft Windows Server 2003 Active Directory. Using ADSI, it provides a means to add, delete, and move objects within the directory services. The attributes of each object can be viewed, changed, and deleted.

To use ADSI Edit, you must first install the Windows Server 2003 Support Tools, available on the Windows Server 2003 CD. Use ADSI Edit to set the directory service dsHeuristics to 001.

Procedure CM.2: To manually set Active Directory to List Object mode

  1. Log on to AD01 using an account that is a member of the Domain Administrators group.

  2. If it is not already installed, install the Windows Server 2003 Support Tools, available on the Windows Server 2003 Server CD.

  3. On the taskbar, click Start, point to Run, type MMC, and then press Enter.

  4. Click File, and then click Add/Remove Snap-in.

  5. Click Add, select ADSI Edit, and then click Add.

  6. Click Close, and then click OK.

  7. In the Select a well known Naming Context drop-down box, select Configuration, and then click OK.

  8. Expand Adsiedit.

  9. Expand Configuration.

  10. Expand CN=Configuration, DC=fabrikam, DC=COM.

  11. Expand CN=Services and CN=Windows NT.

  12. Right-click Directory Service, and then click Properties.

  13. Select the dsHeuristics attribute, and then click Edit.

  14. In the Value text box, type 001, and then click OK.

  15. Click OK to close the Properties dialog box.

Note:
Setting the dsHeuristics attribute to 001 enables List Object mode.