User Account Control Default Values

Question

I noticed that newly created accounts set the useraccountcontrol field to

{PASSWD_NOTREQD|NORMAL_ACCOUNT} = 0x220

rather than:

{NORMAL_ACCOUNT} = 0x200

Is there a place to alter this default setting?

Answer 1

Hello,

The PASSWD_NOTREQD flag is set when no password is specified for the new account. Active Directory doesn't allow user creation if the password is empty and this flag is not set.
To force users to specify passwords for new accounts, you can make the Password property required using Property Patterns.
For more details, please see Generate Initial Password on User Creation (on the 3rd step select the Password cannot be empty option).

See also: Set Default Account Options for New Users.

Comments

Is the 'No Password Required' flag set after you create a user with a non-empty password? - Yes.

Also - I did try to remove the attribute via the Update User function and the user account control. This selector is disabled for the removal function (not the update).

For what it's worth - we are on AD 2003.

---

Is the 'No Password Required' flag set after you create a user with a non-empty password? - Yes.

Hmm, it looks like a bug. Our QA team will investigate it.

Also - I did try to remove the attribute via the Update User function and the user account control. This selector is disabled for the removal function (not the update).

Ah, of course. Sorry, my bad.
You can do it with the help of a PowerShell script:

Import-Module Adaxes

$userDN = "%distinguishedName%";
$userDomain = $Context.GetObjectDomain($userDN);
$ADS_UF_PASSWD_NOTREQD = 0x00000020;

$user = Get-AdmUser $userDN -Properties userAccountControl -Server $userDomain
$user.userAccountControl = $user.userAccountControl -band (-bnot($ADS_UF_PASSWD_NOTREQD));
Set-AdmUser $user -Server $userDomain

---

I just wanted to express my appreciation for your product and support. Both are outstanding and a pleasure to work with.

---

Thank you! :)

---

Hello,

Yesterday we released a new version of Adaxes (2012.1). Using the new version you can automatically update Account Options of user accounts using a special action - Modify Account Options:

• What's New in 2012.1
• Download