Extending AD Schema - Unable to update due to constraint

i'm adding attributes live staging testing purposes i'm using ldifde:

d:\shared>ldifde -i -v -f attr3.ldf -j .  connecting "mydomain.com"  logging in current user using sspi  importing directory file "attr3.ldf"  loading entries  1: cn=myattribute,cn=schema,cn=configuration,dc=mydomain,dc=com  entry modified successfully.      1 entry modified successfully.    command has completed    d:\shared>

but when try update using vbs, get:

c:\users\update.vbs(8, 1) active directory: requested operation did not   satisfy 1 or more constraints associated class of object.

please notice other attributes, original ones, able updated, issue ones i'm importing.

so, wonder if i'm missing step link or detach new attribute after imported.

this attr3.ldf

#attr3.ldf  #adding new attribute  dn: cn=myattribute,cn=schema,cn=configuration,dc=mydomain,dc=com  changetype: add  objectclass: top  objectclass: attributeschema  cn: my-attribute  distinguishedname: cn=my-attribute,cn=schema,cn=configuration,dc=mydomain,dc=com  instancetype: 4  whencreated: 20100401175340.0z  whenchanged: 20100401175341.0z  usncreated: 24154  attributeid: 2.16.840.1.113805.111  attributesyntax: 2.5.5.12  issinglevalued: true  rangelower: 0  rangeupper: 1  usnchanged: 24163  showinadvancedviewonly: true  admindisplayname: my-attribute  admindescription: my-attribute  omsyntax: 64  searchflags: 0  ldapdisplayname: myattribute  name: my-attribute  schemaidguid:: tonvw6suwuu1gev/d1pi9q==  ismemberofpartialattributeset: true  objectcategory: cn=attribute-schema,cn=schema,cn=configuration,dc=mydomain,dc=com    #the following attributes removed because getting:  #add error on entry starting on line 1: unwilling perform  #the server side error is: 0x20e7 modification not permitted security  #reasons.  #the extended server error is:  #000020e7: svcerr: dsid-03152d2c, problem 5003 (will_not_perform), data 0    #objectguid:: etkytnxbce2fpmgc8uie0w==  #attributesecurityguid:: vagn5pi80rghagdat7lgua==

and vbs code,

'update.vbs  set objuser = getobject("ldap://cn=john lennon,cn=users,dc=mydomain,dc=com")   objuser.myattribute="somevalue"  'also tried integers not luck  objuser.setinfo

thanks,

m0dest0.

i got answer:

 

i missing add attr class , refresh schema, 

 1. register dll, regsvr32 schmmgmt.dll

 2. open run , type mmc.exe

 3. add active directory schema snap-in

 4. right click on class, properties , hit add button , on. 

 5. finally, refresh schema:

    c:\users>admod -sc refreshschema

    

    admod v01.17.00cpp joe richards (joe@joeware.net) march 2011

    

    modifying rootdse...

    dn count: 1

    using server: myserver.mydomain.com:389

    directory: windows server 2008 r2

    

    modifying specified objects...

       dn: rootdse...

    

    command completed successfully

regards,

Windows Server  >  Directory Services