The focus of the CRUTO website is no longer scripts and web development. But we realize the usefulness of these scripts and we’ll keep this script archive here for your future reference. Please bookmark this page so you can find your way back. Our home page will no longer link to this archive.
List userAccountControl Values for an Active Directory User Account
Reads values from the userAccountControl of the MyerKen Active Directory user account.
Set objHash = CreateObject("Scripting.Dictionary")
objHash.Add "ADS_UF_SMARTCARD_REQUIRED", &h40000
objHash.Add "ADS_UF_TRUSTED_FOR_DELEGATION", &h80000
objHash.Add "ADS_UF_NOT_DELEGATED", &h100000
objHash.Add "ADS_UF_USE_DES_KEY_ONLY", &h200000
objHash.Add "ADS_UF_DONT_REQUIRE_PREAUTH", &h400000
Set objUser = GetObject _
intUAC = objUser.Get("userAccountControl")
If objUser.IsAccountLocked = True Then
Wscript.Echo "ADS_UF_LOCKOUT is enabled"
Wscript.Echo "ADS_UF_LOCKOUT is disabled"
For Each Key In objHash.Keys
If objHash(Key) And intUAC Then
Wscript.Echo Key & " is enabled"
Wscript.Echo Key & " is disabled"
This sample script is not supported by Cruto or Microsoft under any support program or service. The sample script is provided AS IS without warranty of any kind. Microsoft further disclaims all implied warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample scripts and documentation remains with you. In no event shall Cruto, Microsoft, its authors, or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption,loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample scripts or documentation, even if Microsoft has been advised of the possibility of such damages.