ms-DS-User-Account-Control-Computed attribute

Article
12/14/2020

msDS-User-Account-Control-Computed is much like userAccountControl, but the attribute's value can contain additional bits that are not persisted. The computed bits include the following.

Value	Name (defined in Iads.h)
0x0010	UF_LOCKOUT
0x800000	UF_PASSWORD_EXPIRED
0x4000000	UF_PARTIAL_SECRETS_ACCOUNT
0x8000000	UF_USE_AES_KEYS

The full list of bits that User-Account-Control and therefore msDS-User-Account-Control-Computed can also contain can be found in the User-Account-Control reference page (mapped through the ADSI flagset) or on the network management reference pages for the user_info_1008 structure.

Entry	Value
CN	ms-DS-User-Account-Control-Computed
Ldap-Display-Name	msDS-User-Account-Control-Computed
Size	-
Update Privilege	-
Update Frequency	-
Attribute-Id	1.2.840.113556.1.4.1460
System-Id-Guid	2cc4b836-b63f-4940-8d23-ea7acf06af56
Syntax	Enumeration

Windows Server 2003

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	User

ADAM

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	ms-DS-Bindable-Object

Windows Server 2003 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	User

Windows Server 2008

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	User

Windows Server 2008 R2

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	User

Windows Server 2012

Entry	Value
Link-Id	-
MAPI-Id	-
System-Only	False
Is-Single-Valued	True
Is Indexed	False
In Global Catalog	False
NT-Security-Descriptor	O:BAG:BAD:S:
Range-Lower	-
Range-Upper	-
Search-Flags	0x00000000
System-Flags	0x00000014
Classes used in	User

Share via