Descriptions of Active Directory UserAccountControl Value

This table provides a quick reference guide to common userAccountControl values. This is not intended to be a complete reference.

 

Value	Description
512	Enabled Account – Normal Account
514	Disabled Account – Normal Account
544	Enabled Account, Created by Third Party Application (Eg: IDM)
546	Disabled, Modified by Third Party Application (Eg: IDM)
66048	Enabled, Password Doesn’t Expire
66050	Disabled, Password Doesn’t Expire
66080	Enabled, Password Doesn’t Expire & Not Required
66082	Disabled, Password Doesn’t Expire & Not Required
262656	Enabled, Smartcard Required
262658	Disabled, Smartcard Required
262688	Enabled, Smartcard Required, Password Not Required
262690	Disabled, Smartcard Required, Password Not Required
328192	Enabled, Smartcard Required, Password Doesn’t Expire
328194	Disabled, Smartcard Required, Password Doesn’t Expire
328224	Enabled, Smartcard Required, Password Doesn’t Expire & Not Required
328226	Disabled, Smartcard Required, Password Doesn’t Expire & Not Required

 

How to use the UserAccountControl flags to manipulate user account properties

Ads Constant	Hex Value	Decimal Value
ADS_UF_SCRIPT	0x0001	1
ADS_UF_ACCOUNTDISABLE	0x0002	2
ADS_UF_HOMEDIR_REQUIRED	0x0008	8
ADS_UF_LOCKOUT	0x0010	16
ADS_UF_PASSWD_NOTREQD	0x0020	32
ADS_UF_PASSWD_CANT_CHANGE	0x0040	64
ADS_UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED	0x0080	128
ADS_UF_TEMP_DUPLICATE_ACCOUNT	0x0100	256
ADS_UF_NORMAL_ACCOUNT	0x0200	512
ADS_UF_INTERDOMAIN_TRUST_ACCOUNT	0x0800	2048
ADS_UF_WORKSTATION_TRUST_ACCOUNT	0x1000	4096
ADS_UF_SERVER_TRUST_ACCOUNT	0x2000	8192
ADS_UF_DONT_EXPIRE_PASSWD	0x10000	65536
ADS_UF_MNS_LOGON_ACCOUNT	0x20000	131072
ADS_UF_SMARTCARD_REQUIRED	0x40000	262144
ADS_UF_TRUSTED_FOR_DELEGATION	0x80000	524288
ADS_UF_NOT_DELEGATED	0x100000	1048576
ADS_UF_USE_DES_KEY_ONLY	0x200000	2097152
ADS_UF_DONT_REQUIRE_PREAUTH	0x400000	4194304
ADS_UF_PASSWORD_EXPIRED	0x800000	8388608
ADS_UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION	0x1000000	16777216