Способ1.

1) Right-click the OU/container where computer accounts reside and choose "Delegate Permissions" (do NOT do it for the whole AD as this will allow editing description of any computer object including Domain Controllers)
2) Click "Next" and in the next dialog add "Domain Users" group
3) In the next dialog select "Create a custom task to delegate"
4) Select "only the following objects in the folder" and check "computer objects" in the listbox
5) Click Next. In the next dialog make sure only "Property specific" is checked under "Show these permissions"
6) Check "Write description"
7) Click Next and Finish

Способ2.
If you want to give users the permission to change the computer description that is on the local computer, you will probably need to change the permissions on this registrykey first:
HKLMSYSTEMCurrentControlSetS erviceslanmanserverparameters .
Then you can use a logonscript that add or edit the entry srvcomment in that key.Computer Description Permission