Is there a way to assert if an account in Active Directory is enabled or
disabled using Validator?

In a LDAP browser, I've used the following LDAP filters to select
accounts based on the UserAccountControl bit that shows enabled/disabled

(UserAccountControl:1.2.840.113556.1.4.803:=2) will find disabled users

(!(UserAccountControl:1.2.840.113556.1.4.803:=2)) will find enabled
users (the "not" of the above filter)

I tried a few ways to try to enter the above in Validator without
success. Is there some other way to assert if an Active Directory
account is enabled or disabled?

alkirew's Profile:
View this thread: