Win userAccountControl Basic Properties

userAccountControl Basic Properties

Property Flags	hexadecimal	decimal	Description
SCRIPT	0x0001	1	Run the logon script
Accountdisable	0x0002	2	Account Disabled
Homedir_required	0x0008	8	Account Needs home Directory
Lockout	0x0010	16	Account is locked
Passwd_notreqd	0x0020	32	No Password required
Passwd_cant_change	0x0040	64	User cannot change password (read only)
Encrypted_text_pwd_allowed	0x0080	128	Allow encrypted passwords to be sent
Temp_duplicate_account	0x0100	256	Enable temporary local accounts
Normal_account	0x0200	512	Typical users
Interdomain_trust_account	0x0800	2048	Trust inter-domain trusted accounts
Workstation_trust_account	0x1000	4096	Workstation computers
Server_trust_account	0x2000	8192	Domain Controller
Dont_expire_password	0x10000	65536	Password never expires
Mns_logon_account	0x20000	131072	Majority Node Set (MNS) login
Smartcard_required	0x40000	262144	Require smart card logon
Trusted_for_delegation	0x80000	524288	Allow Kerberos Delegation
not_delegated	0x100000	1048576	Prohibit delegation of security body
Use_des_key_only	0x200000	2097152	Enforcing a key that uses DES encryption
Dont_req_preauth	0x400000	4194304	No Kerberos authentication required at logon
Password_expired	0x800000	8388608	Password has expired
Trusted_to_auth_for_delegation	0x1000000	16777216

The following table is a common combination of userAccountControl values:

userAccountControl Common combination values

Hexadecimal value	Decimal Value	Description
0x200	512	Account OK
0x202	514	Account Disabled
0x220	544	The account is OK, the next login needs to set the password
0x10200	66048	Password never expires
0x40200	262656	Require smart card logon
0x82000	532480	Domain controller (Kerberos delegation available)

Win userAccountControl Basic Properties