Account-Expires attribute
Article
12/14/2020
2 minutes to read
5 contributors
Feedback
In this article
The date when the account expires. This value represents the number of 100-nanosecond intervals since January 1, 1601 (UTC). A value of 0 or 0x7FFFFFFFFFFFFFFF (9223372036854775807) indicates that the account never expires.
Entry
Value
CN
Account-Expires
Ldap-Display-Name
accountExpires
Size
8 bytes
Update Privilege
The domain administrator sets this attribute.
Update Frequency
Whenever the previous expiration date expires and needs to be updated.
Attribute-Id
1.2.840.113556.1.4.159
System-Id-Guid
bf967915-0de6-11d0-a285-00aa003049e2
Syntax
Interval
Implementations
Windows 2000 Server
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
User
Windows Server 2003
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
User
ADAM
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
ms-DS-Bindable-Object
Windows Server 2003 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
User
Windows Server 2008
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
User
Windows Server 2008 R2
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
User
Windows Server 2012
Entry
Value
Link-Id
-
MAPI-Id
-
System-Only
False
Is-Single-Valued
True
Is Indexed
False
In Global Catalog
False
NT-Security-Descriptor
O:BAG:BAD:S:
Range-Lower
-
Range-Upper
-
Search-Flags
0x00000010
System-Flags
0x00000010
Classes used in
User
The high part of this large integer corresponds to the dwHighDateTime member of the FILETIME structure and the low part corresponds to the dwLowDateTime member of the FILETIME structure.