This bit is used by the Kerberos protocol and indicates that the account (when running as a service) obtains an S4U2self service ticket with the forwardable flag set. Specifies that the password age on the user has exceeded the maximum password age policy, i.e. It indicates that the account is not required to present valid pre-authentication data. This bit is used by the Kerberos protocol. It indicates that only des-cbc-md5 or des-cbc-crc keys are used in the Kerberos protocols for this account It indicates that the ticket-granting tickets (TGTs) of this account and the service tickets obtained by this account are not marked as forwardable or proxiable when the forwardable or proxiable ticket flags are requested. It indicates that the 'OK as Delegate' ticket flag MUST be set. The user can authenticate only with a smart card. Specifies that the cleartext password is to be persisted. the password should never expire on the account. Specifies that the maximum-password-age policy does not apply to this user, i.e. Specifies that the object is a Domain Controller.

Specifies that the object is a computer account for a Windows NT Workstation/Windows 2000 Professional or Windows NT Server/Windows 2000 Server that is a member of this domain. This is a permit to trust account for a Windows NT domain that trusts other domains. Specifies that the object represents a trust object. a default account type that represents a typical user. Specifies that the user is not a computer object, i.e. This account provides user access to this domain, but not to any domain that trusts this domain. This flag indicates that the user account is in another domain. The password-length policy does not apply to this user, i.e. The account is not enabled for authentication (disabled).

The following values are attributes of a user account and can be combined by using a bitwise OR operation: A 32-bit flag specifying characteristics of the account.

Pcunlocker unable to read sam database