switchboard
All tools

userAccountControl Decoder

Turn a userAccountControl integer into the AD flags it sets.

Why this exists

userAccountControl is a bitmask, 514 means 'disabled normal account', 66050 adds 'password never expires'. Reading it by eye is error-prone, and it's the fastest way to see why an account behaves the way it does.

How to use
  1. Paste the userAccountControl value (decimal like 514, or hex like 0x202).
  2. Each set flag is listed with its name and what it means.
  3. Or toggle flags on the right to build a value to write back.

Worked example

Paste 514 to see a disabled normal account (ACCOUNTDISABLE + NORMAL_ACCOUNT), or hit a preset above. You can also build a value with the toggles on the right.

Builder

00x0

Toggle flags to compute a value to write back to userAccountControl.