Active Directory User Account Control değerleri aşağıdaki gibidir. Örnek pasword never expired olan kullanıcıları bulabilmekiçin aşağıdaki komut kullanılır.
get-aduser -filter “useraccountcontrol -band 66048” -properties * | ft name, ueraccountcontrol
Default UserAccountControl değerleri aşağıdaki gibidir:
Standart user : 0x200 (512)
Domain controller : 0x82000 (532480)
Workstation/server: 0x1000 (4096)
Örneğin: UAC değeri 4128 ( Workstataion + Password not required) olan bir WS için, 4096 (Workstation) + 32 (Password not required)
| Value | Description |
| 512 | Enabled Account |
| 514 | Disabled Account |
| 544 | Enabled, Password Not Required |
| 546 | Disabled, Password Not Required |
| 66048 | Enabled, Password Doesn’t Expire |
| 66050 | Disabled, Password Doesn’t Expire |
| 66080 | Enabled, Password Doesn’t Expire & Not Required |
| 66082 | Disabled, Password Doesn’t Expire & Not Required |
| 262656 | Enabled, Smartcard Required |
| 262658 | Disabled, Smartcard Required |
| 262688 | Enabled, Smartcard Required, Password Not Required |
| 262690 | Disabled, Smartcard Required, Password Not Required |
| 328192 | Enabled, Smartcard Required, Password Doesn’t Expire |
| 328194 | Disabled, Smartcard Required, Password Doesn’t Expire |
| 328224 | Enabled, Smartcard Required, Password Doesn’t Expire & Not Required |
| 328226 | Disabled, Smartcard Required, Password Doesn’t Expire & Not Required |
| Property flag | Value in hexadecimal | Value in decimal |
| SCRIPT | 0x0001 | 1 |
| ACCOUNTDISABLE | 0x0002 | 2 |
| HOMEDIR_REQUIRED | 0x0008 | 8 |
| LOCKOUT | 0x0010 | 16 |
| PASSWD_NOTREQD | 0x0020 | 32 |
| PASSWD_CANT_CHANGE | 0x0040 | 64 |
| ENCRYPTED_TEXT_PWD_ALLOWED | 0x0080 | 128 |
| TEMP_DUPLICATE_ACCOUNT | 0x0100 | 256 |
| NORMAL_ACCOUNT | 0x0200 | 512 |
| INTERDOMAIN_TRUST_ACCOUNT | 0x0800 | 2048 |
| WORKSTATION_TRUST_ACCOUNT | 0x1000 | 4096 |
| TRUST_ACCOUNT | 0x2000 | 8192 |
| DONT_EXPIRE_PASSWORD | 0x10000 | 65536 |
| MNS_LOGON_ACCOUNT | 0x20000 | 131072 |
| SMARTCARD_REQUIRED | 0x40000 | 262144 |
| TRUSTED_FOR_DELEGATION | 0x80000 | 524288 |
| NOT_DELEGATED | 0x100000 | 1048576 |
| USE_DES_KEY_ONLY | 0x200000 | 2097152 |
| DONT_REQ_PREAUTH | 0x400000 | 4194304 |
| PASSWORD_EXPIRED | 0x800000 | 8388608 |
| TRUSTED_TO_AUTH_FOR_DELEGATION | 0x1000000 | 16777216 |
| PARTIAL_SECRETS_ACCOUNT | 0x04000000 | 67108864 |
Azure Security - Cyber Security 