how to get the Account Disabled Date

[Ashish Goenkar]

Can anyone tell me how to read the date of a specific account that was disabled. For instance, what things has to go in here - dsquery * dc=mydomain,dc=lab -filter "(&(objectClass=person)(name=nik)) -attr displayName givenName sn WhenCreated

Thanks

[T.J.]

You can try to add a clause to your filter that will check the proper bit of the userAccountControl attribute so that you will only get information on user accounts that are disabled. The clause to AND with the others is:

(userAccountControl:1.2.840:113556:1.4.803:=2)