pre-creating a machine account in AD

[Rowland Penny]

OK, I am trying fix bug 12294 (if 'fix' is the right word) and have got
to the testing point and whilst I can create a basic machine, I am
having a problem with 'userAccountControl'.

From my understanding, you should be able to pre-create a machine in a
disabled state by adding 2 to the userAccountControl value, but I
cannot get this to work. I am 100% sure that the attribute value is set
to 4098 (UF_WORKSTATION_TRUST_ACCOUNT + UF_ACCOUNT_DISABLE) but when
the machine is created, the value is 4096.

Is there something in the underlying 'C' code stopping the creation of
disabled machine accounts (and, presumably, user accounts) ?
If so, can somebody fix this?

Rowland