ad-managed-by-logon/.claude-context/00-overview.md

ad-managed-by-logon — Project Overview

Purpose

PowerShell GPO logon script that provides two-way user/computer tracking in Active Directory:

• Computer object "Managed By" tab -> last logged-in user
• User object "Notes" field -> last computer used

Architecture

Single self-contained PowerShell script (Set-ComputerManagedBy.ps1) deployed via GPO User Logon Script to NETLOGON share. No external dependencies — uses AD PowerShell module when available, falls back to ADSI/DirectorySearcher when RSAT is not installed.

Key Files

• Set-ComputerManagedBy.ps1 — the logon script
• README.md — deployment and delegation instructions

Session Log

• 2026-09-23 — AD Managed-By Logon Script — Initial build, added Notes field, fixed Unicode encoding for ISE, split error handling so ManagedBy and Notes failures are independent