You must have sufficient rights to modify the schema. The
schema contains all of the data definitions for Active Directory
for the entire enterprise. To update the schema, a user must be a
member of the Schema Administrators group, or have been
delegated the rights to update the schema.
You can only make schema changes at the schema master. For more
information, see Detecting the Schema
Master.