I see. This is the same with 512 and 514, I think. Ole On 13.02.2017 18:04, Rowland Penny via samba wrote:> On Mon, 13 Feb 2017 17:49:41 +0100 > Ole Traupe via samba <samba at lists.samba.org> wrote: > >> "userAccountControl:1.2.840.113556.1.4.803:=2" >> >> Sorry, I cannot read the Matrix. ;) >> >> Ole >> >> >> > (!(userAccountControl:1.2.840.113556.1.4.803:=2)) > > You can read about it here: > > https://support.microsoft.com/en-gb/help/269181/how-to-query-active-directory-by-using-a-bitwise-filter > > Basically it means that the user isn't disabled. > If you add '2' to a users 'userAccountControl' attribute, you disable > the users account, the above checks it isn't set ( '!' = not ) > > Rowland >
Rowland Penny
2017-Feb-14 11:29 UTC
[Samba] Users list and the date the password will expire
On Tue, 14 Feb 2017 11:29:39 +0100 Ole Traupe via samba <samba at lists.samba.org> wrote:> I see. This is the same with 512 and 514, I think. >An enabled user account is 512, if you add 2 to it, you get 514, but if you set the users account to never expire you get '66048' if the account is enabled and '66050' if it is disabled. Rowland
Yes, but if the password never expires, I don't need to include it in the check the script performs. Ole On 14.02.2017 12:29, Rowland Penny via samba wrote:> On Tue, 14 Feb 2017 11:29:39 +0100 > Ole Traupe via samba <samba at lists.samba.org> wrote: > >> I see. This is the same with 512 and 514, I think. >> > An enabled user account is 512, if you add 2 to it, you get 514, but if > you set the users account to never expire you get '66048' if the > account is enabled and '66050' if it is disabled. > > Rowland > >