Are there any command line options available to know the (user)account type?

Hemanth Thummala hemanth.thummala at
Fri Feb 16 20:01:09 UTC 2018

Correct. Looks like that’s the only authoritative way to identify a machine account. We are able to get this information using ldapsearch query using anonymous bind.
But, we would like to know if this ldapsearch anonymous bind works all the time to query for “SamAccountType” attribute for any user account. Is there a possibility that this anonymous check can be blocked by placing any restrictions on the Active Directory objects? 

On 16/02/18, 11:41 AM, "Rowland Penny" <rpenny at> wrote:

    On Fri, 16 Feb 2018 19:30:31 +0000
    Hemanth Thummala via samba-technical <samba-technical at>
    > Yes. Looks like DC only returning the type as user SID. 
    > Wondering when the DC can return type as “SidTypeComputer” if not for
    > the machine account names.
    I think the attribute you are looking for is 'sAMAccountType', a users
    is '805306368' and a computers is '805306369'

More information about the samba-technical mailing list