USER_INFO_1008 structure
The USER_INFO_1008 structure contains a set of bit flags defining several user network account parameters. This information level is valid only when you call the NetUserSetInfo function.
Syntax
typedef struct _USER_INFO_1008 { DWORD usri1008_flags; } USER_INFO_1008, *PUSER_INFO_1008, *LPUSER_INFO_1008;
Members
- usri1008_flags
-
The features to associate with the user account specified in the username parameter to the NetUserSetInfo function. This member can be one or more of the following values. Note that setting user account control flags may require certain privileges and control access rights. For more information, see the Remarks section of the NetUserSetInfo function.
Value Meaning - UF_SCRIPT
The logon script executed. This value must be set.
- UF_ACCOUNTDISABLE
The user's account is disabled.
- UF_HOMEDIR_REQUIRED
The home directory is required. This value is ignored.
- UF_PASSWD_NOTREQD
No password is required.
- UF_PASSWD_CANT_CHANGE
The user cannot change the password.
- UF_LOCKOUT
The account is currently locked out. You can call the NetUserSetInfo function to clear this value and unlock a previously locked account. You cannot use this value to lock a previously unlocked account.
- UF_DONT_EXPIRE_PASSWD
The password should never expire on the account.
- UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED
The user's password is stored under reversible encryption in the Active Directory.
- UF_NOT_DELEGATED
Marks the account as "sensitive"; other users cannot act as delegates of this user account.
- UF_SMARTCARD_REQUIRED
Requires the user to log on to the user account with a smart card.
- UF_USE_DES_KEY_ONLY
Restrict this principal to use only Data Encryption Standard (DES) encryption types for keys.
- UF_DONT_REQUIRE_PREAUTH
This account does not require Kerberos preauthentication for logon.
- UF_TRUSTED_FOR_DELEGATION
The account is enabled for delegation. This is a security-sensitive setting; accounts with this option enabled should be tightly controlled. This setting allows a service running under the account to assume a client's identity and authenticate as that user to other remote servers on the network.
- UF_PASSWORD_EXPIRED
The user's password has expired.
Windows 2000: This value is not supported.
- UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION
The account is trusted to authenticate a user outside of the Kerberos security package and delegate that user through constrained delegation. This is a security-sensitive setting; accounts with this option enabled should be tightly controlled. This setting allows a service running under the account to assert a client's identity and authenticate as that user to specifically configured services on the network.
Windows XP/2000: This value is not supported.
The following values describe the account type. Only one value can be set. You cannot change the account type using the NetUserSetInfo function.
Requirements
|
Minimum supported client |
Windows 2000 Professional [desktop apps only] |
|---|---|
|
Minimum supported server |
Windows 2000 Server [desktop apps only] |
|
Header |
|
See also