Hi,
I have recently become aware of the introduction of the
msDS-User-Account-Control-Computed attribute in Win2003 Active Directory.
I
realise that it like the earlier UserAccountControl still has some
shortcomings but it was my understanding that the
msDS-User-Account-Control-Computed attribute was now reliable at
indicating
UF_LOCKOUT. If this is incorrect, that is all I need confirmed by someone.
Up till now I have used the WinNT provider to access the lockout from the
UserFlags. Now, I need to upgrade to use the newer LDAP attribute
msDS-User-Account-Control-Computed if it in fact works. From articles I
have
read it is a simple as getting the user object then getting the attribute,
whilst using [ ] around the name to overcome the problem with "-" in the
name.
Set X = ds.OpenDSObject(rs(0), cServerAccountName,
cServerAccountPassword, 0)
intUserAccountControl = X.[msDS-User-Account-Control-Computed]
Unfortunately, this gives me no value. Can anyone suggest where I should
look.
I hope this provides enough information to get started. Thanks in advance.
Janette
|
