Since the userAccountControl stores data as a bit-mapped field, you can accomplish this with a simple bitwise compare of the userAccountControl field’s value. Add the following comparision as script overriding a field’s (i.e. – target.active) transform map:

// checking if account is active; bitwise compare

var uac = source.u_useraccountcontrol.toString(16); // change the value to hex

if (uac & 0x2) {

// this account is disabled

answer = 0;

}

else {

answer = 1;

}

You can use the same code snippet for checking for locked out or password expired accounts by changing the compare value from 0x2 to 0x10 or 0x800000 respectively.

Hope its helpful…