Are there any command line options available to know the (user)account type?

[Hemanth Thummala]

Correct. Looks like that’s the only authoritative way to identify a machine account. We are able to get this information using ldapsearch query using anonymous bind.
But, we would like to know if this ldapsearch anonymous bind works all the time to query for “SamAccountType” attribute for any user account. Is there a possibility that this anonymous check can be blocked by placing any restrictions on the Active Directory objects? 

Thanks,
Hemanth.
On 16/02/18, 11:41 AM, "Rowland Penny" <rpenny at samba.org> wrote:

    On Fri, 16 Feb 2018 19:30:31 +0000
    Hemanth Thummala via samba-technical <samba-technical at lists.samba.org>
    wrote:
    
    > Yes. Looks like DC only returning the type as user SID. 
    > Wondering when the DC can return type as “SidTypeComputer” if not for
    > the machine account names.
    
    I think the attribute you are looking for is 'sAMAccountType', a users
    is '805306368' and a computers is '805306369'
    
    Rowland