To introduce some license levels (organization, computer, user), I need to pinpoint information that identifies the object (organization, computer, user) without user interaction.
To identify the user for a user based license, I have used the user name, domain (either AD domain, or computer name), and user security ID (user objectGUID).
To identify the computer for a computer based license, I have used the computer name, domain, vendor, model, and serial number (of the computer model).
But I struggle to find a good information pinpoint on the organization based licenses. First I was thinking about the AD domain. But this is can be faked to easily. Now I am thinking to enhance the information pool with a Active Directory GUID. But does this even exists? I explicitly do not mean the computer GUID of a AD domain controller, as they are subject to frequent change. Is there any GUID in the AD ecosystem, that identifies the domain and not the domain controller? So I will receive the same "organization GUID" with every domain controller?