Import Windows host descriptions from Active Directory

[naelhrrd]

What would you like Teleport to do?

Teleport should be able to automatically import the “description” field from Active Directory computer objects and make it visible or usable as part of the resource metadata (e.g., as a label or displayed information in the web UI). This would help administrators quickly identify the purpose or location of Windows hosts.

What problem does this solve?

In environments with many Windows servers joined to Active Directory, the description attribute is often used by administrators to document the server's function, department, or physical location. Currently, this information is not visible in Teleport, which can make it harder to identify machines, especially when hostnames are not meaningful.

Being able to view or query machine descriptions directly from Teleport (e.g., in the Windows Desktop UI or using labels) would improve usability and help with resource management, access auditing, and support workflows.

If a workaround exists, please include it.

A possible workaround is to manually define labels in each teleport.yaml configuration for Windows hosts, or to write a script that:

• Queries the description attribute from AD via PowerShell or LDAP
• Updates labels dynamically or via the Teleport API

However, this requires additional scripting and maintenance, and is not scalable in larger environments.

[zmb3]

Great idea, I'd be happy to add this functionality.