Is there a way to assert if an account in Active Directory is enabled or
disabled using Validator?

In a LDAP browser, I've used the following LDAP filters to select
accounts based on the UserAccountControl bit that shows enabled/disabled
status:

(UserAccountControl:1.2.840.113556.1.4.803:=2) will find disabled users

(!(UserAccountControl:1.2.840.113556.1.4.803:=2)) will find enabled
users (the "not" of the above filter)

I tried a few ways to try to enter the above in Validator without
success. Is there some other way to assert if an Active Directory
account is enabled or disabled?


--
alkirew
------------------------------------------------------------------------
alkirew's Profile: https://forums.netiq.com/member.php?userid=9115
View this thread: https://forums.netiq.com/showthread.php?t=52877