计算机加入域后同步计算机描述客户计算机描述加域后是否会出现在计算机帐号的描述处？我的客户机Windows7和xp，在本机的计算机属性-描述中添加了描述，当这台计算机加入域后，会在Computers容器下生成这个计算机帐号，那客户机的描述会不会随着加域同步到计算机帐号的描述属性中呢？回答：从您的描述中，我对这个问题的理解是您想知道：如果在windows 7或者是XP 的客户端计算机上添加了计算机属性描述后，当将其加入域，描述是否也会同步到域中。
基于我的实验和搜索，客户端的属性描述是不会随着计算机加入域而同步到计算机账号描述中的。
请您参考的我的实验：Windows 7 客户端添加描述，然后加入域，结果如下：∙Windows 7 客户端：owindows 7客户端系统描述∙ADUC中的结果：oADUC控制台中，计算机账户描述如果您想客户端计算机描述可以自动同步到AD当中，您可以使用脚本来实现。
首先我们需要授予经过身份验证的域用户可以编辑计算机对象描述值的权限。
您可以参照以下操作步骤：1.以管理员的身份登录到DC上，打开ADUC.2.选择 advanced Features.oADUC控制台高级查看模式3.右键域名，选择properties.4.点击‘security’标签, 点击‘advanced’按钮。
5.点击‘add’按钮, 输入‘Authenticated Users’.然后点击OK.6.在permission entry 这个对话框中, 点击‘apply to’下来菜单，选择‘Descendant Computer Objects’,在permission对话框中, 勾选‘Write Description’。
o计算机对象写描述权限7.编写可以实现这一功能的脚本。
以下的链接是基于我个人的搜索提供给您的参考。
o Automatically fill the computer description field in Active Directoryo /scripts/show/1406-automat ically-fill-the-computer-description-field-in-active-directory魏玉婷微软全球技术支持中心计算机加入域后同步计算机描述的相关文章请参看将该计算机的主域dns名称更改为失败加入域:将该计算机的主域DNS名称更改为linux加入ad域linux加入域Linux加入windows域加入域的方法计算机加入域的过程将计算机加入域加入域|指定服务器无法运行请求的操作计算机无法加入域远程客户端无法加入域域用户加入域的权限mac os加入Windows域密码过期如何提示电脑加入域如何直接进入某个OU把计算机加入域|域用户权限加入域突破10次限制|域用户权限加入域退出域|权限设置加入域|找不到指定的域加入域|找不到网络路径—gnaw0725Automatically fill the computer description field in Active DirectoryA VBScript script in the Active Directory categoryRating: 12345 (9 votes)Plain text without HTML formatting.DescriptionThis will populate the last logged on user, system model, and serial number in the computer description in AD.In order for this process to work, we will need to allow our authenticated domain users to edit the description values on computer objects. Be aware that by doing this, a malicious or cheeky user on your network could change the description on computer objects to anything they want. Given that mine were all empty, anyway, and that they get overwritten each time someone logs in, I didn’t think this would be a significant problem for me. To grant this access, perform the following steps:1) Open Active Directors Users and Computers MMC2) Ensure you have ‘Advanced Features’ enabled (On the ‘view’ menu)3) Right click on your domain, and select ‘properties’ from the context menu4) On the ‘security’ tab, click the ‘advanced’ button5) Click the ‘add’ button, type ‘Authenticated Users’. Then click OK.6) In the permission entry dialogue, set the ‘apply to’ pull-down menu to ‘Descendant Computer Objects’, then in the permissions section, tick the allow options for ‘Write Description’If you run this script as a regular user, then check ADUC, you should find that the computer object that the script was run from, has now a description field set.All that remains now is to add the VBScript to the user login script. I do this via GPO (User configuration > Policies > Windows Settings > Scripts > Logon). Once your GPO is updated, restart another system, and login again –once more, you should see that computers AD object updated. Now you can stil back and relax while you watch your computer objects in AD fill up with useful information in the description field.About the AuthorgefTabascoNetwork/Systems Administratordecode ITSource CodeImportant Note:This script has not been checked by Spiceworks. Please understand the risks before using it.Set WshNetwork = WScript.CreateObject("work")Set objFSO = WScript.CreateObject("Scripting.FileSystemObject")Set objWMI =GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")For Each objSMBIOS in objWMI.ExecQuery("Select * fromWin32_SystemEnclosure")serviceTag = replace(objSMBIOS.SerialNumber, ",", ".")manufacturer = replace(objSMBIOS.Manufacturer, ",", ".")NextFor Each objComputer in objWMI.ExecQuery("Select * fromWin32_ComputerSystem")model = trim(replace(objComputer.Model, ",", "."))NextSet objTextFile =objFSO.OpenTextFile("\\SV01.home.local\logonActivity\logons.csv", 8, True)objTextFile.WriteLine(date & "," & time & "," & erName & "," & puterName & "," & erDomain & "," & serviceTag & "," & manufacturer & "," & model)objTextFile.CloseSet objSysInfo = CreateObject("ADSystemInfo")Set objComputer = GetObject("LDAP://" & puterName)if NOT objComputer.Description = erName & " (" & serviceTag & " - " & manufacturer & " " & model & ")" thenobjComputer.Description = erName & " (" & serviceTag & " - " & manufacturer & " " & model & ")"objComputer.SetInfoend if。
