# ad-managed-by-logon — Project Overview

## Purpose
PowerShell GPO logon script that provides two-way user/computer tracking in Active Directory:
- Computer object "Managed By" tab -> last logged-in user
- User object "Notes" field -> last computer used

## Architecture
Single self-contained PowerShell script (`Set-ComputerManagedBy.ps1`) deployed via GPO User Logon Script to NETLOGON share. No external dependencies — uses AD PowerShell module when available, falls back to ADSI/DirectorySearcher when RSAT is not installed.

## Key Files
- `Set-ComputerManagedBy.ps1` — the logon script
- `README.md` — deployment and delegation instructions

## Session Log
- 2026-09-23 — AD Managed-By Logon Script — Initial build, added Notes field, fixed Unicode encoding for ISE, split error handling so ManagedBy and Notes failures are independent