Guy’s Scripting Ezine No 23b – Complete list of UserAccountControl Values
Guy’s Scripting Ezine No 23b – Complete list of UserAccountControl Values
Guy Thomas
November 11, 2000
Ezine
Complete List of UserAccountValues
Real life usages e.g. UserAccountControl Value = 514
Explanation of why 514 = 512 [Normal] + 2 [AccountDisable]
SCRIPT
0x0001
1
ACCOUNTDISABLE
0x0002
2
HOMEDIR_REQUIRED
0x0008
8
LOCKOUT
0x0010
16
PASSWD_NOTREQD
0x0020
32
PASSWD_CANT_CHANGE
0x0040
64
ENCRYPTED_TEXT_PWD_ALLOWED
0x0080
128
TEMP_DUPLICATE_ACCOUNT
0x0100
256
NORMAL_ACCOUNT
0x0200
512
INTERDOMAIN_TRUST_ACCOUNT
0x0800
2048
WORKSTATION_TRUST_ACCOUNT
0x1000
4096
SERVER_TRUST_ACCOUNT
0x2000
8192
DONT_EXPIRE_PASSWORD
0x10000
65536
MNS_LOGON_ACCOUNT
0x20000
131072
SMARTCARD_REQUIRED
0x40000
262144
TRUSTED_FOR_DELEGATION
0x80000
524288
NOT_DELEGATED
0x100000
1048576
USE_DES_KEY_ONLY
0x200000
2097152
DONT_REQ_PREAUTH
0x400000
4194304
PASSWORD_EXPIRED
0x800000
8388608
TRUSTED_TO_AUTH_FOR_DELEGATION
0x1000000
16777216
Explanation: 514 = 512 [Normal] = 2 [AccountDisable]
Guy Recommends: SolarWinds’ Free Bulk Import Tool
Import users from a spreadsheet. Just provide a list of the users with their fields in the top row, and save as .csv file. Then launch this FREE utility and match your fields with AD’s attributes, click and import the users.
Optionally, you can provide the name of the OU where the new accounts will be born. Download your FREE bulk import tool.
If you need more comprehensive software, download a free trial of SAM (Server & Application Monitor)
Property Flag Descriptions
SCRIPT – The logon script will be run.
ACCOUNTDISABLE – The user account is disabled.
HOMEDIR_REQUIRED – The home folder is required.
PASSWD_NOTREQD – No password is required.
PASSWD_CANT_CHANGE – The user cannot change the password. You can read this flag but you cannot set it directly.
ENCRYPTED_TEXT_PASSWORD_ALLOWED – The user can send an encrypted password.