Correlating User accounts to Computer Accounts

[Michael Hetrick]

I have a few questions about some of the computer attributes in AD -
specifically making a correlation between user and computer accounts.

Are there any recommendations on what attributes to use to add a computer
name to a user account (for the user's computer) or a user name to a
computer account (for the computer's user)?

I looked at the AD Schema Reference in the Platform SDK and found 14 pages
of attributes; however, I don't know which ones should/shouldn't be used
since so few are visible in AD Users & Computers MMC.

Is it as simple as "Managed By" on the computer account properties? Does
this grant any special permissions? What is that supposed to be used for?

Thanks -
Michael

 

[Cary Shultz [A.D. MVP]]

Michael,

What exactly are you trying to accomplish?

Cary

 

[Michael Hetrick]

I want to be able to link a user account to a computer account. Too many
times, the computer accounts grow out of control because they are not
deleted when new ones are created. If there was a user account stored in
one of the computer attributes, then it would be easier to see if there were
2 or more computers for a single user.

The question is... Where is the best place to store the primary user account
name in the computer attributes? The other part of the question is what is
does Managed By do for a computer account? Is this a good place to put the
primary user?

Thanks-
Michael