User Attribute

[netwalker1]

Dear All :
we are trying to find if the user is disabled or enabled using the attribute : userAccountControl

it works with all my domains - except one of the domains where we found that some users have this attributes and some of them don't !

any idea ?

Mohamed Farid
[green]Know Me No Pain , No Me Know Pain !!![/green]

 

[GrimR]

see if this helps

http://windowsitpro.com/article/art...-controller-is-not-functioning-correctly.html

 

[ITPangaeaArchitect]

The userAccountControl attribute is only held on security principals.

The value for a disabled account is 514 (0x00000512 + 0x00000002)
Enabled account = 512. The +2 above is the added bits to set an account to disabled.

all enabled users have to have a useraccountcontrol value or else no account options could be set, and userparameters could not be defined. This would result in an unusable security principal (user, computer, etc.)
I suspect you may be seeing contact objects, which may appear in searches for user objects.

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.