How to change object attribute in Active Directory from Mac OS?

Question

LDAP

Hello!
There is an Active Directory domain, there is a large park of iMacs.
There is a task^ to make logon / logoff hooks in mac os to see who logged into which computer in the domain. The idea is not new: to change the description attribute of a user or computer account. What is the best way to implement it? Has anyone already done this?