UserAccountControl value of 590338

Posted on 2012-08-31
Last Modified: 2012-08-31
First let me start by saying I am a novice at LDAP stuff

For a report I am writing I need to retrieve some ldap info so I

ran the following query

SELECT displayname
FROM openquery(ADSI, 'SELECT department
                      FROM ''LDAP://t.local'' (I blanked out ldap value for security)
                      WHERE objectCategory = ''Person''AND objectClass =''user''
                      order by displayname')

I was able to google all the useraccount control values to see what they meant except for the user account control value of 590338

Any one have any idea what this one means?
Question by:johnnyg123
    LVL 57

    Accepted Solution

    You have to add them up which can be a pain

    Accountdisable    = 2
    NormalAccount    = 512
    Dont_expire_password = 65536
    Trusted_for_delegation = 524288

    = 590338

    bing/google "calculating useraccountcontrol"  really nice spreadsheet out there that can make this a lot's what I used :)



    Author Closing Comment

    Perfect....Thanks Mike!
    LVL 57

    Expert Comment

    by:Mike Kline
    Glad to help...helped me too because I didn't have that spreadsheet :)



    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    This is my first article in EE and english is not my mother tongue so any comments you have or any corrections you would like to make, please feel free to speak up :) For those of you working with AD, you already are very familiar with the classi…
    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now