6-4: Manage Computer Roles and Capabilities
Type of solution
Guidance and scripts
Features and tools
Computer_DesktopsLaptops.vbs, Active Directory groups
Apply the concepts of role-based management to computers so that you can manage their configuration and the applications that are deployed to them. Use a script to dynamically maintain role groups, such as groups for desktops and laptops.
Prior to Windows 2000, groups did not contain computer accounts. For that reason, many organizations have been slow to adopt and adapt to computer groups. You can use groups that contain computer objects for numerous management tasks, including software deployment, patch management, asset inventory, ...