Creating the Custom LDF File to suit for AD LDS Setup

  1. Open Command Prompt and then Go to C:\Windows\ADAM.

    media/image12.png

  2. Execute ADSchemaAnalyzer.exe that displays a new window AD DS / LDS Schema Analyzer.

    media/image13.png

  3. In Schema Analyzer window, go to File Menu and then select Load Target Schema.

    media/image14.png

  4. In Load Target Schemadialog box, provide the following details:
    1. Server[:port]: [Give IP address of Active Directory Server]:[Active Directory port]
    2. Username: [Username to connect to Active Directory]
    3. Password: [Password of above username of Active Directory]
    4. Domain: [Domain of Active Directory which contains above user]

      media/image15.png

      Note:

      If you do not provide port number after server IP/DNS Name, it takes default LDAP port that is 389.

  5. Click Ok.
  6. AD DS/LDS Schema Analyzer screen shows the following folder structure. Once it is connected to Active Directory Server.

    media/image16.png

  7. Go to File Menu and then select Load base schema.

    media/image17.png

  8. The Load base schema dialog box appears to enter the following details:
    1. Server[:Port]: [Give IP address of AD LDS]:[AD LDS port]
    2. Username: [Administrator Username of the local server]
    3. Password: [Password of Administrator]
    4. Domain: [Domain of Active Directory which contains above user]

      media/image18.png

  9. Click Ok.
  10. Go to Schema Menu and then select Mark all non-present elements as included.

    media/image19.png

  11. Click Ok.
  12. Go to File Menu and then select Create LDIF file.

    media/image20.png

  13. In the File Dialog box provide the path of LDIF file to store.
  14. By default, it shows C:\Windows\ADAM Path.
  15. Enter name of the file and click Save.
  16. Open Command Prompt and then Go to C:\Windows\System32.
  17. Execute the following 3 commands as mentioned below:
    • ldifde -i -u -f [Path of LDIF File which is created by using Schema Analyzer] -s [IP address of AD LDS]:[Port of AD LDS] -b [Administrator Username of the local server ] [Domain of Active Directory which contains above user] [Password of Administrator] -j . -c "cn=Configuration,dc=X" #configurationNamingContext

      For example,

      ldifde -i -u -f c:\windows\adam\ADLDSSyncProxy3_129.ldf -s 192.168.26.129:50000 -b administrator pmsnmdomain XXXXXXXXXXXXXX -j . -c "cn=Configuration,dc=X" #configurationNamingContext

      media/image21.png

    • ldifde -i -f c:\windows\adam\MS-AdamSyncMetadata.ldf -s [IP address of AD LDS]:[Port of AD LDS] -b [Administrator Username of the local server ] [Domain of Active Directory which contains above user] [Password of Administrator] -c CN=Configuration,DC=X #ConfigurationNamingContext

      For example,ldifde -i -f c:\windows\adam\MS-AdamSyncMetadata.ldf -s 192.168.26.129:50000 -b administrator pmsnmdomain XXXXXXXXXXXXXX -c CN=Configuration,DC=X #ConfigurationNamingContext

      media/image22.png

    • ldifde -i -f c:\windows\adam\MS-adamschemaw2k8.ldf -s [IP address of AD LDS]:[Port of AD LDS] -b [Administrator Username of the local server ] [Domain of Active Directory which contains above user] [Password of Administrator] -c CN=Configuration,DC=X#ConfigurationNamingContext

      For example,ldifde -i -f c:\windows\adam\MS-adamschemaw2k8.ldf -s 192.168.26.129:50000 -b administrator pmsnmdomain XXXXXXXXXXXX -c CN=Configuration,DC=X#ConfigurationNamingContext

      media/image23.png