query enabled computers from AD

[hklemm]

I'm trying to query computer objects from AD.

How can I identify the enabled/disabled status?

Any suggestions?

[Greg_Deckler]

https://support.microsoft.com/en-us/kb/305144

You would do a bitwise AND with decimal 2 to determine if it is disabled:

psuedocode:

(userAccountControl & 2) != 0) // disabled