Administratively Disabled


The account is disabled typically by setting a value on the entry.

When we refer to Administratively Disabled, this typically implies explicit permanently disabled entries. An Administratively Disabled entry can typically only be enabled by changing the Administratively Disabled Attribute Value.

This is NOT Locked By Intruder or any other form of lock out that might be activated by activities performed by the entry.

EDirectory loginDisabled#

EDirectory uses loginDisabled to indicate Administratively Disabled

Oracle orclisenabled#

How Oracle's OID uses orclisenabled to indicate Administratively Disabled

Active Directory Account Lockout#

Microsoft Active Directory uses the ACCOUNTDISABLE bit of the User-Account-Control Attribute to indicate Administratively Disabled


LDAP Server Implementations that use draft-behera-ldap-password-policy use the pwdAccountLockedTime to indicate Administratively Disabled

More Information#

There might be more information for this subject on one of the following: