How many people have extended the AD with custom attributes?
We've got a printing system that we use whereby we put users into a group in AD to give them permissions to print against a particular account.
Our copiers only allow logging in by code. We've set a 3 digit code for each member of staff and a 2 digit code for each of the AD groups. Concatenating these codes gives us a list from which we can easily identify who is copying what for each department.
So if my code is 123 and my department code is 69 then my copier code is 69123 and if I'm authorised to copy for IT Curriculum too (code 71) then I have another code 71123 to charge the copying to them. This way the department part of the codes can easily be got from colleagues and the user only has one code to remember for their personal part.
I've got a wonderful spreadsheet that works it all out, creates script to populate the AD groups and exports text files to import into the copiers and mail the group managers a list of people that can print against their department.
However when we add new staff or staff move or the AD groups and the spreadsheet get out of sync its a royal pita to sort out.
My proposed solution is:
To add a custom attribute to the user and group objects in AD to store the code
To create my copier codes directly from the information in the AD rather than an duplicate set of records in the spreadsheet.
What's the consensus on adding custom fields to AD?