Overview#

MsDS-User-Account-Control-Computed is much like userAccountControl, but the attribute's value can contain additional bits that are not persisted.

The Constructed Attribute bits include the following:

• LOCKOUT
• Password Expired
• PARTIAL_SECRETS_ACCOUNT
• USER_USE_AES_KEYS

LDAP (Microsoft Active Directory) Attribute Definition#

The MsDS-User-Account-Control-Computed AttributeTypes is defined as:

• CN:
• OID of 1.2.840.113556.1.4.1460
• NAME: MsDS-User-Account-Control-Computed
• DESC:
• EQUALITY:
• ORDERING:
• SYNTAX:
• LOWERBOUND:
• UPPERBOUND:
• OMSyntax:
• SchemaIDGUID: 2cc4b836-b63f-4940-8d23-ea7acf06af56
• mapiID:
• SINGLE-VALUE
• USAGE: UserApplications
• Extended Flags:
  • X-ORIGIN: MSDN
• X-SYSTEMFLAGS
• X-SCHEMAFLAGSEx
• X-SEARCH-FLAGS
• Used as MUST in:
• Used as MAY in:

More Information#

There might be more information for this subject on one of the following:

• 1.2.840.113556.1.4.1460
• User-Account-Control Attribute
• User-Account-Control Attribute Values

---

• [#1] - ms-DS-User-Account-Control-Computed attribute - based on information obtained 2020-01-04