Active Directory Administration Cookbook

How it works...

Many individual settings and options for user accounts are stored for the object in the userAccountControl attribute. While administrators can set these options through the user interface, they can also be set by modifying the attribute itself.

Additionally, the userAccountControl attribute can also be used in scripts to find user objects with specific sets of values.

The userAccountControl attribute defines a lot of properties for any user and/or computer object. The value for this attribute is built up of bits; every value is a (combination of) 2^x value(s):

Name	Value	Value	Value	Description
SCRIPT	1	20	0x00000001	A log-on script is executed.
ACCOUNTDISABLE	2	21	0x00000002	The account ...