I like to give domain-joined computers the rights to modify some typically-unused AD attributes (givenName, surName, etc) on their own objects. I assign a Start

I like to give domain-joined computers the rights to modify some typically-unused AD attributes (givenName, surName, etc) on their own objects. I assign a Startup Script to populate make, model, serial, etc, into these unused attributes. These attributes are nice because their display specifiers allow them to be added to views in Active Directory Users and Computers very easily.