attribute type Microsoft

1.2.840.113556.1.4.8

userAccountControl

also known as User-Account-Control

A single integer whose bits carry an account's state: 2 disables it, 512 marks a normal enabled account, 65536 means the password never expires, and so on. You almost never match it for equality; you test one bit at a time with the bitwise matching rule, as in userAccountControl:1.2.840.113556.1.4.803:=2 to find disabled accounts.

OID
1.2.840.113556.1.4.8
Name
userAccountControl
Aliases
User-Account-Control
Kind
attribute type
Arcwho allocated the number
Microsoft 1.2.840.113556

Schema

Syntax
Enumeration
Single-valued
yes

Definition

attributetype ( 1.2.840.113556.1.4.8 NAME 'userAccountControl' SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' SINGLE-VALUE )

Appears in: OpenLDAP msuser.schema, Active Directory schema. Primary source. Spotted an error? Tell me.

← All OIDs

I also take on a small number of consulting engagements. Work with me →