It is possible to change the behavior of the ADC to either leave the description blank, or to write a different description when creating a disabled user account. To do so, add a value to the registry on the computer that is running the ADC, and then set the value to the desired description:
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
- Start Registry Editor (Regedt32.exe).
- Locate the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSADC\Parameters\
- On the Edit menu, click Add Value, and then add the following registry value:
Value Name: Disabled Windows User Account Description
Data Type: REG_SZ
Value: (Your Description Here)
- Quit Registry Editor.
If you set a blank in the value, then the ADC will not write any description on the disabled user.
Note Making these changes modifies the behavior of any new accounts that will be created and does not modify any existing accounts that have been created by the ADC. You must restart the Active Directory Connector service before the registry key will take effect.