userAccountControl codes polling LDAP

  • Thread starter Thread starter Disability
  • Start date Start date
D

Disability

I'm mining our AD LDAP for info regarding the status of a
user. Specifically, I'm looking for whether a user is
disabled or not.

At first I thought 512 = enabled and 514 = disabled, but
then I found another set of similar codes for the
userAccountControl fields:

66048 = Enabled
66050 = Disabled

Can anyone explain the difference between the two sets of
numerically different codes?

Thanks,

Disability Ability
 
A little googling answered my own question:

66048 = Enabled, password never expires
66050 = Disabled, password never expires
 
Back
Top