Many user objects' settings can be controlled using the userAccountControl attribute.
Managing userAccountControl
Getting ready
To set the userAccountControl attribute for users, you should sign in to a domain controller or a member server and/or device with the RSAT for Active Directory Domain Services installed.
Sign in with an account that is a member of the Domain Admins group.
How to do it...
userAccountControl can be managed in the following two ways:
- Reading the userAccountControl attribute
- Setting the userAccountControl attribute