The date when the account expires. This value represents the number of 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 or 0x7FFFFFFFFFFFFFFF (9223372036854775807) indicates that the account never expires. Accounts configured to never expire may have either value, depending on whether they were originally configured with an expiration value, with 0x7FFFFFFFFFFFFFFF (9223372036854775807) indicating that the account has not been previously configured to expire.
| Entry |
Value |
| CN |
Account-Expires |
| Ldap-Display-Name |
accountExpires |
| Size |
8 bytes |
| Update Privilege |
The domain administrator sets this attribute. |
| Update Frequency |
Whenever the previous expiration date expires and needs to be updated. |
| Attribute-Id |
1.2.840.113556.1.4.159 |
| System-Id-Guid |
bf967915-0de6-11d0-a285-00aa003049e2 |
| Syntax |
Interval |
Implementations
Windows 2000 Server
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
User
|
Windows Server 2003
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
User
|
ADAM
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
ms-DS-Bindable-Object
|
Windows Server 2003 R2
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
User
|
Windows Server 2008
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
User
|
Windows Server 2008 R2
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
User
|
Windows Server 2012
| Entry |
Value |
| Link-Id |
- |
| MAPI-Id |
- |
| System-Only |
False |
| Is-Single-Valued |
True |
| Is Indexed |
False |
| In Global Catalog |
False |
| NT-Security-Descriptor |
O:BAG:BAD:S: |
| Range-Lower |
- |
| Range-Upper |
- |
| Search-Flags |
0x00000010 |
| System-Flags |
0x00000010 |
| Classes used in |
User
|
The high part of this large integer corresponds to the dwHighDateTime member of the FILETIME structure and the low part corresponds to the dwLowDateTime member of the FILETIME structure.
When an account is created, the account is initially set to Never Expire. The accountExpires attribute is set to the default of 9223372036854775807, a value which corresponds the maximum value of a 64-bit signed integer. If an account is configured with an expiration date, the accountExpires value is configured to the FILETIME value for the expiration date. If at any point in time an account which was configured with an expiration time is set back to Never Expires, the accountExpires attribute is then set to 0.