Directory Programming .NET

We mention a couple times in Chapter 10 that you can use the 'msDs-User-Account-Control-Computed' attribute in place of the 'userAccountControl' attribute.  This is actually not true.  This particular attribute will only show two things - AccountLockout, and PasswordExpired.  For all other values it will be zero.

This greatly reduces the value of this attribute and is unfortunate.  All the code is still correct in that Chapter, we just want to clarify about the use of that particular attribute.

---

Ryan Dunn
Extemporaneous Mumblings
The .NET Developer's Guide to Directory Services Programming