LDAP: is an account disabled ?

  • Thread starter Thread starter Pierre Bru
  • Start date Start date
P

Pierre Bru

hi,

can I check with LDAP if an account is disabled ? is there a field for
that ?

can I specify in an LDAP request made with netscape not to return the
disabled account ?

TIA,
Pierre.
 
Yes you can check with LDAP, you want to avoid any accounts where
(useraccountcontrol:1.2.840.113556.1.4.803:=2) isn't true. So you simply add the
following to whatever your query currently is

(!(useraccountcontrol:1.2.840.113556.1.4.803:=2))

joe
 
Joe said:
Yes you can check with LDAP, you want to avoid any accounts where
(useraccountcontrol:1.2.840.113556.1.4.803:=2) isn't true. So you simply
add the following to whatever your query currently is

(!(useraccountcontrol:1.2.840.113556.1.4.803:=2))

joe
Click to expand...

thx a lot Joe! where can I find info on AD proprietary fields and their
bitmask/values ?

Pierre.
 
Back
Top