Updates to AD Data Validation Script

An “AD Data Validation” script runs weekly to notify COUAs about computer objects where the ManagedBy field is blank or set to an invalid AD username (for example, a user who has left USGS).

Starting 10/4/2022, the “AD Data Validation” script will clear the ManagedBy field when it contains a Group instead of a User.

Read More…

Modify the managedBy Attribute of a Computer Object

All computer objects in Active Directory are required to have a user set in the managedBy attribute. This information will be used to tie computers to OrgCodes to assist with future cost recovery needs.

  • The assigned customer should be set to the “end user” who uses the system day-to-day
  • Contractors should be assigned directly to the …

    Read More…