Question about AD

[jake]

Hello,

I have noticed that each computer in our domain has a description that
is from the local box itself. Some of these descriptions are different in
AD. We want to have the AD descriptions displayed not the ones from the
boxes themselves when people look under entire network. How can we
accomplish this or force people to look through the AD and not entire
network? All of the boxes are XP pro with a DC of w2k3. Thanks.

Jake

 

[BS]

Jake-

These are two different descriptions, if I understand your message
correctly.

First, you are dealing with the description assigned to the local
workstations (in XP, System Properties, Computer Name tab, then "Computer
description"). Second, you are dealing with the description in Active
Directory Users & Computers.

My vote would be to get rid of the local computer descriptions altogether.
If descriptions are required, put them in AD. However, I haven't ever seen
a crucial need for descriptions for computer objects. I've seen a need for
printer objects.

BS

 

[Chris Knapp]

And to answer a question you haven't asked, to force your users to use AD
and "disable" Network Neighborhood (My Network Places), you can run the
following command as part of each users login script:

net config server /hidden:yes

This will stop the broadcasting of a system's NetBIOS name so users can't
browse for another computer. They can still connect with the UNC however if
they know the NetBIOS name already.