Hi. I have a network with about 70 computers and I would like to populate the local computer description of each computer with the name of the last user logged on. I wrote a script that will do this for me via AD; one problem remains, the domain users do not have permission to write/change the computer description. I know it is possible to allow them via Active Directory (Advanced Security...), but one wrong move could cause alot of headaches. So I am looking for some direction on exactly which setting I need to change to allow domains users to alter the computer description. Thanks for your help in advance.

Take a look here: http://technet2.microsoft.com/windo... Or here: http://www.microsoft.com/technet/sc... Both results of a Google search. Life's more painless for the brainless.

Yes, both of those describe What I need to do, which is what I described in my dilemma, however, I'm looking more for How to do it. I know I'll be editing advanced security permissions in active directory. I added a permission entry for Authenticated Users that applies to computer objects and allows them to "Write Description." But I must have done something wrong because they still cannot change their computer description. Thanks again for your help and reply.

The second article tells you in the third paragraph. Write the scripts and then assign them as a login script. Life's more painless for the brainless.

Once again, it tells me WHAT to do (something I'm very familiar with) but to quote the second article, third paragraph, it does not tell me HOW to "make sure that all your users have permissions to change the Description attribute for both their own account and for the computer account." How do I give my domain users permission to change the description attribute for their computer?