When trying to remove the VPN schema using SCHRMV, I get an ldap_modify
error on one of the files ... there are numerous entries like:

#Record: 9, ldap_modify failed: 53(DSA is unwilling to perform), dn:
dn: cn=schema
changetype: modify
delete: objectClasses
objectClasses: ( 2.16.840.1.113719. NAME 'bmPolicyRule' )

According to TID10067376, this error is caused by:

"NDS User account has been expired or disabled. Error 53 can also be
caused when the NDS User account exceeds Concurrent Connections, has a
Limited Login Time defined, or the Intruder Detection limits have been

However, I am logged in as Admin and none of these issues apply -- and
all other extensions are correctly removed.

Can anybody suggest what might be the problem here? Or is there some way
of manually removing these extensions?

Ken McLeod
The Delphian School