I noticed that Jackson Shaw had some comments about my post. For those of you not familiar with Jackson… well… I’d suggest taking a gander at his blog which is a good hitching post for insight into ID management, security, AD, etc.
Anyhow… he made several really good comments… But, with one comment in particular, I wanted to clarify a position of mine: “Worse, you still find many customers out there that are just simply afraid to extend their schema.” With this statement, he is absolutely correct! There are many IT’ers that are deathly afraid of touching their AD schema. Maybe it was a bad experience, maybe they actually did their homework, or maybe a person like me or Jackson struck fear into their hearts. Regardless of the cause, they shake in their boots when it comes time to make schema changes.
Well, this was not the intent with my post, nor was Jackson implying that was my intent. However, given the doomsday tone of my post, I thought that it might be appropriate to clearly state that I’m not advocating fear. Rather, I was merely stating facts about AD that are buried, lost, forgotten, or simply just over looked. So with that… do what Jackson suggests:
- Test, test, test…
- Put into place a good change control plan
- Maybe even look at some of the different recovery solutions
