User account control flags

Site navigation

home > products > user-management-resource-administrator... (you are here)

Testimonial:

We have 3600 students and 200 staff members. We create 3600 accounts every year and clean them out like lockers at the end of the year. Can you immagine doing that by hand!! User managment is a god send.
Gregory Basile
Van Nuys High School
http://www.vannuyshs.org
read more...

User Management Resource Administrator: User Account Management for Windows 2003/XP/2000/NT

To specify the value of the userAccountControl attribute, a simple calculation must be made. Add the values shown in the table below to determine the exact value.

userAccountControl bit mask value	Description	Comment
512	Normal account	Always include this value
2	Disabled account
4096	Computer account	When included, the account is setup as an computer account

-	User must change password at next logon	This flag cannot be set directory. Instead, the attribute pwdLastSet must be set to 0.
64	User cannot change password
65536	Password never expires
32	Password not required

Table 11: Overview of the bit flags specified by attribute userAccountControl

When the user account is created, the Active Directory software checks and updates the value of the userAccountControl attribute. When no password is specified, the flag User must change password at next logon is set automatically.

The result of this action is stored in variable %LdapData% that is used by the next action.