How to fetch user who are disabled in LDAP active directory

Question

我必须编写Java代码来查找活动目录中的特定用户是启用还是禁用。

Answer 1

You can inspect the userAccountControl bit flag attribute. Its 2nd bit indicates if a user is disabled (see the Remarks section on the attribute's MSDN page .)

The easiest is to use a bitwise filter in your LDAP query:

(userAccountControl:1.2.840.113556.1.4.803:=2)

This filter expression will return only disabled accounts (see more on the usage of bitwise filters in this article ).