Active directory stores a user’s account status in the userAccountControl field.  I find it’s easier to decode the Complete list of Codes by converting to binary.

Here are some common values:

       1000000000 - 512	Normal Account
       1000000010 - 514	Normal Account, Disabled
       1000100000 - 544	Normal Account, Password Not Req'd
       1000100010 - 546	Normal Account, Password Not Req'd, Disabled
10000001000000000	- 66048	Pwd never expires, Normal, Enabled
10000001000000010	- 66050	Pwd never expires, Normal, Disabled
Advertisements