Overview#

The account is expired.

For Microsoft Active Directory, the account was provided a expiration time on the MMC Account Tab and the User-Account-Control Attribute. This will typically be reflected in the LDAP attribute in accountExpires.

NOTE: The Microsoft Response Code ERROR_ACCOUNT_EXPIRED is provided only when presented with valid username and password/credential.

For EDirectory, the LoginExpirationTime indicates the time when the entry expires.

For draft-behera-ldap-password-policy complaint LDAP Implementations, pwdEndTime represents the time when the entry expires.

More Information#

There might be more information for this subject on one of the following:

• Common Active Directory Bind Errors
• Event 4625
• Kerberos Error Codes