[Samba] Schema Update to store TPM data in AD DS

Johannes Engel jcnengel at gmail.com
Fri Sep 7 16:14:47 UTC 2018

Hi all,

has anyone here experience with storing BitLocker and TPM data in AD DS on
I have stumbled across this Microsoft page (
stating that Windows 2008 R2 needs a schema extension to handle this. Since
this is not listed as a safe update in the wiki (
https://wiki.samba.org/index.php/Samba_AD_schema_extensions), I would like
to know if anybody has already tried this, since I do not have any
experience with restoring a schema after a failed import. ;)
Thanks a lot for your input.

Best regards

More information about the samba mailing list