Thursday, November 13, 2008

Active Directory userAccountControl Values

Normal Day to Day Values:
===========================
512 - Enable Account
514 - Disable account
544 - Account Enabled - Require user to change password at first logon
4096 - Workstation/server
66048 - Enabled, password never expires
66050 - Disabled, password never expires
262656 - Smart Card Logon Required
532480 - Domain controller

All Other Values:
===========================
1 - script
2 - accountdisable
8 - homedir_required
16 - lockout
32 - passwd_notreqd
64 - passwd_cant_change
128 - encrypted_text_pwd_allowed
256 - temp_duplicate_account
512 - normal_account
2048 - interdomain_trust_account
4096 - workstation_trust_account
8192 - server_trust_account
65536 - dont_expire_password
131072 - mns_logon_account
262144 - smartcard_required
524288 - trusted_for_delegation
1048576 - not_delegated
2097152 - use_des_key_only
4194304 - dont_req_preauth
8388608 - password_expired
16777216 - trusted_to_auth_for_delegation


reference:
http://support.microsoft.com/kb/305144
http://www.computerperformance.co.uk/ezine/ezine23.htm

10 comments:

Fabio Araujo said...

Thanks, you saved my day!

Fabio Araujo said...

Thanks, you saved my day!

Brandon Caddow-Young said...

Thankyou

Brandon Caddow-Young said...

Thankyou!

Dany Gauthier said...

Thanks!

WindTalker said...

Very very helpful.. reduced my work
Thanks a bunch!!

Susie Sharp said...

Awesome, Ranish! Very helpful!

Susie Sharp said...

Thanks, Rajnish! This is most helpful and concise!

Susie Sharp said...

Thanks, Rajnish! This was most helpful and concise!

Tomasz Święcicki said...

Thanks