Overclock.net › Forums › Specialty Builds › Servers › Active Directory Computer Descriptions
New Posts  All Forums:Forum Nav:

Active Directory Computer Descriptions

post #1 of 6
Thread Starter 
Hopefully this is the right section, I didn't see any better suited ones.

I've just recently completed a computer renaming scheme in my domain, but I want a way I can safely identify devices. I can add descriptions through active directory, but I was curious if these descriptions would be visible to people outside of our network, or if they're just tied to active directory.

Basically I've done a naming scheme where you cannot tell what department or user is using a computer from the computer name. It would be nice if I could do descriptions through active directory so I'd be able to see who's who without defeating the entire purpose of the renaming in the first place.

Any ideas?

PS: I can already see who's using what machine through Spiceworks, but I'd rather use the tools built into active directory.
post #2 of 6
Quote:
Originally Posted by Methos07 View Post

Hopefully this is the right section, I didn't see any better suited ones.
I've just recently completed a computer renaming scheme in my domain, but I want a way I can safely identify devices. I can add descriptions through active directory, but I was curious if these descriptions would be visible to people outside of our network, or if they're just tied to active directory.
Basically I've done a naming scheme where you cannot tell what department or user is using a computer from the computer name. It would be nice if I could do descriptions through active directory so I'd be able to see who's who without defeating the entire purpose of the renaming in the first place.
Any ideas?
PS: I can already see who's using what machine through Spiceworks, but I'd rather use the tools built into active directory.

First ADUC has to be installed on a person's system to even access AD and I don't think a user/system can use it if they don't have the necessary rights. Have you tried a design where it's: root -> Department OU -> System Type OU -> System(based off serial/service tag) -> Desc: User name - OS - Last updated


It's a similar design we use here at my job.
post #3 of 6
Thread Starter 
Quote:
Originally Posted by cubanresourceful View Post

First ADUC has to be installed on a person's system to even access AD and I don't think a user/system can use it if they don't have the necessary rights. Have you tried a design where it's: root -> Department OU -> System Type OU -> System(based off serial/service tag) -> Desc: User name - OS - Last updated
It's a similar design we use here at my job.

I'm just not sure if the descriptions I'd apply through active directory would actually "apply" to the machines themselves. I just wouldn't want someone from outside of our network to be able to, if they even got access, see a computer's description and be able to tell what it is used for.

Right now we've just got Root --> Department -> Laptop/Desktop as far as departmentalized OU's go. It's sufficient enough for our company size. It would be perfect if I could just add a service tag and primary user in the description without jeopardizing the point of renaming the computers.
post #4 of 6
Quote:
Originally Posted by Methos07 View Post

I'm just not sure if the descriptions I'd apply through active directory would actually "apply" to the machines themselves. I just wouldn't want someone from outside of our network to be able to, if they even got access, see a computer's description and be able to tell what it is used for.
Right now we've just got Root --> Department -> Laptop/Desktop as far as departmentalized OU's go. It's sufficient enough for our company size. It would be perfect if I could just add a service tag and primary user in the description without jeopardizing the point of renaming the computers.

I mean, when you have an object in AD for a system, put in the description field the details I listed above. It gives all the pertinent details at a glance, especially the main user. I don't think anybody outside can access your forest, but I just want to clarify, are you speaking about the Computer Description in Windows, or you're talking about the description field for an object in AD?
post #5 of 6
Thread Starter 
Quote:
Originally Posted by cubanresourceful View Post

I mean, when you have an object in AD for a system, put in the description field the details I listed above. It gives all the pertinent details at a glance, especially the main user. I don't think anybody outside can access your forest, but I just want to clarify, are you speaking about the Computer Description in Windows, or you're talking about the description field for an object in AD?

The description of the object in active directory, yes. I believe you've answered my question though, so thank you.
post #6 of 6
Quote:
Originally Posted by Methos07 View Post

The description of the object in active directory, yes. I believe you've answered my question though, so thank you.

No problem, let me know if you have any other questions, feel free to send a PM. I'll try to answer as best as I can. thumb.gif
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Servers
Overclock.net › Forums › Specialty Builds › Servers › Active Directory Computer Descriptions