Share via

3.4.4.3.3.2.3 ActiveDirectoryDomainController/Enabled

  • Article

The Enabled element contains a Boolean element indicating that the domain controller's computer account is enabled (TRUE) or is disabled (FALSE).  

 <xs:element name="Enabled" type="xs:boolean" />
 

The Enabled element is populated from the ADS_UF_ACCOUNT_DISABLE bit of the computer!userAccountControl attribute on the directory server's computer object.  The Directory Server's computer object is referenced by the server!serverReference attribute ([MS-ADTS] section 6.1.1.2.2.1.2.1) on the parent of the nTDSDSA object specified by the GetADDomainControllerRequest/NtdsSettingsDN (section 3.4.4.3.2.3) input parameter element. If the server!serverReference attribute is not present or cannot be read due to the client lacking access rights to read the attribute, the server returns the SOAP fault described in section 3.4.4.3.8.1. If the ADS_UF_ACCOUNT_DISABLE bit of the computer!userAccountControl attribute (see [MS-ADTS] section 2.2.16) is set to 1 and the client has access rights to read the attribute, the server populates the ActiveDirectoryDomainController/Enabled element with a value of FALSE; otherwise, the server populates the element with a value of TRUE.