UserAccountControlFlag (com.hfg API Documentation)

java.lang.Object
- java.lang.Enum<UserAccountControlFlag>
- - com.hfg.ldap.ad.UserAccountControlFlag

All Implemented Interfaces:

Serializable, Comparable<UserAccountControlFlag>
```
public enum UserAccountControlFlag
extends Enum<UserAccountControlFlag>
```
Active Directory user account control flags.
These are the default UserAccountControl values for the certain objects:
- Typical user : 0x200 (512)
- Domain controller : 0x82000 (532480)
- Workstation/server: 0x1000 (4096)

Enum Constant Summary

Enum Constants
Enum Constant and Description
`ACCOUNTDISABLE` The user account is disabled.
`DONT_EXPIRE_PASSWORD` Represents the password, which should never expire on the account.
`DONT_REQ_PREAUTH` (Windows 2000/Windows Server 2003) This account does not require Kerberos pre-authentication for logging on.
`ENCRYPTED_TEXT_PWD_ALLOWED` The user can send an encrypted password.
`HOMEDIR_REQUIRED` The home folder is required.
`INTERDOMAIN_TRUST_ACCOUNT` This is a permit to trust an account for a system domain that trusts other domains.
`LOCKOUT` The user account is locked.
`MNS_LOGON_ACCOUNT` This is an MNS logon account.
`NORMAL_ACCOUNT` This is a default account type that represents a typical user.
`NOT_DELEGATED` When this flag is set, the security context of the user is not delegated to a service even if the service account is set as trusted for Kerberos delegation.
`PARTIAL_SECRETS_ACCOUNT` (Windows Server 2008/Windows Server 2008 R2) The account is a read-only domain controller (RODC).
`PASSWD_CANT_CHANGE` The user cannot change the password.
`PASSWD_NOTREQD` No password is required.
`PASSWORD_EXPIRED` (Windows 2000/Windows Server 2003) The user's password has expired.
`SCRIPT` The logon script will be run.
`SERVER_TRUST_ACCOUNT` This is a computer account for a domain controller that is a member of this domain.
`SMARTCARD_REQUIRED` When this flag is set, it forces the user to log on by using a smart card.
`TEMP_DUPLICATE_ACCOUNT` This is an account for users whose primary account is in another domain.
`TRUSTED_FOR_DELEGATION` When this flag is set, the service account (the user or computer account) under which a service runs is trusted for Kerberos delegation.
`TRUSTED_TO_AUTH_FOR_DELEGATION` (Windows 2000/Windows Server 2003) The account is enabled for delegation.
`USE_DES_KEY_ONLY` (Windows 2000/Windows Server 2003) Restrict this principal to use only Data Encryption Standard (DES) encryption types for keys.
`WORKSTATION_TRUST_ACCOUNT` This is a computer account for a computer that is running Microsoft Windows NT 4.0 Workstation, Microsoft Windows NT 4.0 Server, Microsoft Windows 2000 Professional, or Windows 2000 Server and is a member of this domain.

Method Summary

All Methods Static Methods Instance Methods Concrete Methods
Modifier and Type	Method and Description
`static EnumSet<UserAccountControlFlag>`	`fromBitFlags(int inValue)`
`int`	`intValue()`
`static UserAccountControlFlag`	`valueOf(String name)` Returns the enum constant of this type with the specified name.
`static UserAccountControlFlag[]`	`values()` Returns an array containing the constants of this enum type, in the order they are declared.

Methods inherited from class java.lang.Enum
clone, compareTo, equals, finalize, getDeclaringClass, hashCode, name, ordinal, toString, valueOf

Methods inherited from class java.lang.Object
getClass, notify, notifyAll, wait, wait, wait

- Enum Constant Detail
  - SCRIPT
```
public static final UserAccountControlFlag SCRIPT
```
    The logon script will be run.
  - ACCOUNTDISABLE
```
public static final UserAccountControlFlag ACCOUNTDISABLE
```
    The user account is disabled.
  - HOMEDIR_REQUIRED
```
public static final UserAccountControlFlag HOMEDIR_REQUIRED
```
    The home folder is required.
  - LOCKOUT
```
public static final UserAccountControlFlag LOCKOUT
```
    The user account is locked.
  - PASSWD_NOTREQD
```
public static final UserAccountControlFlag PASSWD_NOTREQD
```
    No password is required.
  - PASSWD_CANT_CHANGE
```
public static final UserAccountControlFlag PASSWD_CANT_CHANGE
```
    The user cannot change the password.
  - ENCRYPTED_TEXT_PWD_ALLOWED
```
public static final UserAccountControlFlag ENCRYPTED_TEXT_PWD_ALLOWED
```
    The user can send an encrypted password.
  - TEMP_DUPLICATE_ACCOUNT
```
public static final UserAccountControlFlag TEMP_DUPLICATE_ACCOUNT
```
    This is an account for users whose primary account is in another domain. This account provides user access to this domain, but not to any domain that trusts this domain. This is sometimes referred to as a local user account.
  - NORMAL_ACCOUNT
```
public static final UserAccountControlFlag NORMAL_ACCOUNT
```
    This is a default account type that represents a typical user.
  - INTERDOMAIN_TRUST_ACCOUNT
```
public static final UserAccountControlFlag INTERDOMAIN_TRUST_ACCOUNT
```
    This is a permit to trust an account for a system domain that trusts other domains.
  - WORKSTATION_TRUST_ACCOUNT
```
public static final UserAccountControlFlag WORKSTATION_TRUST_ACCOUNT
```
    This is a computer account for a computer that is running Microsoft Windows NT 4.0 Workstation, Microsoft Windows NT 4.0 Server, Microsoft Windows 2000 Professional, or Windows 2000 Server and is a member of this domain.
  - SERVER_TRUST_ACCOUNT
```
public static final UserAccountControlFlag SERVER_TRUST_ACCOUNT
```
    This is a computer account for a domain controller that is a member of this domain.
  - DONT_EXPIRE_PASSWORD
```
public static final UserAccountControlFlag DONT_EXPIRE_PASSWORD
```
    Represents the password, which should never expire on the account.
  - MNS_LOGON_ACCOUNT
```
public static final UserAccountControlFlag MNS_LOGON_ACCOUNT
```
    This is an MNS logon account.
  - SMARTCARD_REQUIRED
```
public static final UserAccountControlFlag SMARTCARD_REQUIRED
```
    When this flag is set, it forces the user to log on by using a smart card.
  - TRUSTED_FOR_DELEGATION
```
public static final UserAccountControlFlag TRUSTED_FOR_DELEGATION
```
    When this flag is set, the service account (the user or computer account) under which a service runs is trusted for Kerberos delegation. Any such service can impersonate a client requesting the service. To enable a service for Kerberos delegation, you must set this flag on the userAccountControl property of the service account.
  - NOT_DELEGATED
```
public static final UserAccountControlFlag NOT_DELEGATED
```
    When this flag is set, the security context of the user is not delegated to a service even if the service account is set as trusted for Kerberos delegation.
  - USE_DES_KEY_ONLY
```
public static final UserAccountControlFlag USE_DES_KEY_ONLY
```
    (Windows 2000/Windows Server 2003) Restrict this principal to use only Data Encryption Standard (DES) encryption types for keys.
  - DONT_REQ_PREAUTH
```
public static final UserAccountControlFlag DONT_REQ_PREAUTH
```
    (Windows 2000/Windows Server 2003) This account does not require Kerberos pre-authentication for logging on.
  - PASSWORD_EXPIRED
```
public static final UserAccountControlFlag PASSWORD_EXPIRED
```
    (Windows 2000/Windows Server 2003) The user's password has expired.
  - TRUSTED_TO_AUTH_FOR_DELEGATION
```
public static final UserAccountControlFlag TRUSTED_TO_AUTH_FOR_DELEGATION
```
    (Windows 2000/Windows Server 2003) The account is enabled for delegation. This is a security-sensitive setting. Accounts that have this option enabled should be tightly controlled. This setting lets a service that runs under the account assume a client's identity and authenticate as that user to other remote servers on the network.
  - PARTIAL_SECRETS_ACCOUNT
```
public static final UserAccountControlFlag PARTIAL_SECRETS_ACCOUNT
```
    (Windows Server 2008/Windows Server 2008 R2) The account is a read-only domain controller (RODC). This is a security-sensitive setting. Removing this setting from an RODC compromises security on that server.
- Method Detail
  - values
```
public static UserAccountControlFlag[] values()
```
    Returns an array containing the constants of this enum type, in the order they are declared. This method may be used to iterate over the constants as follows:
```
for (UserAccountControlFlag c : UserAccountControlFlag.values())
    System.out.println(c);
```
    Returns:
    
    an array containing the constants of this enum type, in the order they are declared
  - valueOf
```
public static UserAccountControlFlag valueOf(String name)
```
    Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)
    
    Parameters:
    
    name - the name of the enum constant to be returned.
    
    Returns:
    
    the enum constant with the specified name
    
    Throws:
    
    IllegalArgumentException - if this enum type has no constant with the specified name
    
    NullPointerException - if the argument is null
  - intValue
```
public int intValue()
```
  - fromBitFlags
```
public static EnumSet<UserAccountControlFlag> fromBitFlags(int inValue)
```

Enum UserAccountControlFlag

Enum Constant Summary

Method Summary

Methods inherited from class java.lang.Enum

Methods inherited from class java.lang.Object

Enum Constant Detail

SCRIPT

ACCOUNTDISABLE

HOMEDIR_REQUIRED

LOCKOUT

PASSWD_NOTREQD

PASSWD_CANT_CHANGE

ENCRYPTED_TEXT_PWD_ALLOWED

TEMP_DUPLICATE_ACCOUNT

NORMAL_ACCOUNT

INTERDOMAIN_TRUST_ACCOUNT

WORKSTATION_TRUST_ACCOUNT

SERVER_TRUST_ACCOUNT

DONT_EXPIRE_PASSWORD

MNS_LOGON_ACCOUNT

SMARTCARD_REQUIRED

TRUSTED_FOR_DELEGATION

NOT_DELEGATED

USE_DES_KEY_ONLY

DONT_REQ_PREAUTH

PASSWORD_EXPIRED

TRUSTED_TO_AUTH_FOR_DELEGATION

PARTIAL_SECRETS_ACCOUNT

Method Detail

values

valueOf

intValue

fromBitFlags