How to get disable accounts of Active directory.

Hi Guys.

I want disable accounts from active directiory..which property will give me the detail that weather this account is disable or not ??

Thanks in advanced,

Parthiv,.

Re: How to get disable accounts of Active directory.

Hi,

Please see this link it will help you..

http://windowsitpro.com/article/articleid/77098/jsi-tip-5794-you-disabled-an-account-in-active-directory-but-the-user-can-still-logon.html

Thanks..

Re: How to get disable accounts of Active directory.

Hi vigneshngl..

Thanks for your reply...but i want to handle it in coding, i just want that, which property of AD user says me that , weather this account is disable or not..

Thanks,

Parthiv

Re: How to get disable accounts of Active directory.

Hi,

Pls search this url content..

http://www.c-sharpcorner.com/uploadfile/ecabral/adand.net08242005065451am/adand.net.aspx

Re: How to get disable accounts of Active directory.

hi vigneshngl

I have checked the value of user property "userAccountControl" and i got value is 66050. Now what this value means...i don't know from this value how can i found weather this user is disable or not...!!! can you give me mode idae for compare value with this property value..

Thanks again for your reply.

Parthiv.

Re: How to get disable accounts of Active directory.

From my understanding of AD: the userAccountControl has the following values:

512=active
514=disabled
544= pwd not required
546=pwd not required and disabled
66048=do not expire pwd
66050=do not expire pwd and disabled
524800=trusted - active ?

I could not figure out the 524800 ??, it is active. Note that adding 2 to the active value makes it disabled one for that type.

HTH

Re: How to get disable accounts of Active directory.

hi,

What does it mean by the value

"4096" and "4098"

Thanks and Regards,

Parthiv.

Re: How to get disable accounts of Active directory.

4096 is probably a work station account= active work station/server. The 4098 will be its corresponding disabled.

Re: How to get disable accounts of Active directory.

I know this is an old post, but the following may help some people.

This article lists all the Property Flags of UserAccountControl along with their Values.

http://support.microsoft.com/kb/305144

You should use a bitwise And to work out if one of these is being used.