Share via

Differentiate CNO - VCO from computer objects in AD.

  • Article

Question

Wednesday, June 10, 2015 11:56 AM

In my attempts to distinguish between computers & VCO / CNO, the only solution I’ve is to check the [editable] description field.

another option to check the servicePrincipalName/s is there but that's again editable. In an unguarded environment any one with Admin Rights can change it. Further there's this OperatingSystem which is populated only for boxes & not for VCO/CNO.

  If any one of you can help me find a PSH / filter to do this in a proper way.

yup

All replies (2)

Friday, June 12, 2015 2:45 AM | 1 vote

Hi yup,

You can refer the following article to protect the CNO and VCO attribute.

CNO Blog Series: Increasing Awareness around the Cluster Name Object (CNO

http://blogs.technet.com/b/askcore/archive/2012/09/25/cno-blog-series-increasing-awareness-around-the-cluster-name-object-cno.aspx

I’m glad to be of help to you!

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Monday, June 15, 2015 10:52 PM

Thanks for you reply Alex, I'm looking more for a differentiating factor between ComputerObjects & CNO/VCO. If possible any system property.

yup