Forum Discussion

moshiera's avatar
moshiera
Frequent Visitor
7 years ago

Active Directory and User Account Control

I had an issue that seems to be asked alot and found this and wanted to share it to all: 

 

Here's the function that we found for using the UserAccountControl value to determine if an account is active or disabled.  We created a custom column with the forumal:

 

= Number.BitwiseAnd([UserAccountControl],2)

 

I found in Microsoft's AD documentation that the UAC code (2) is the official flag for disabled accounts, and the function above returns a (2) if the account is disabled or (0) if the account is active. You can use this for other things as well. We also use it for SmartCard Required = Number.BitwiseAnd([UserAccountControl],262144).   Below is the microsoft website to get the values. 

 

https://support.microsoft.com/en-us/help/305144/how-to-use-useraccountcontrol-to-manipulate-user-account-properties