UAC Convert (PowerShell)

UACConvert.ps1 is a PowerShell script for converting Active Directory userAccountControl values to human-readable flags and for building a userAccountControl value from flags.

Features

• Decode a UAC integer or hex value into flags
• Encode flags into a UAC integer/hex value
• Interactive prompt mode
• Optional -ShowAll to list all flags with IsSet
• Colored output for set flags in -ShowAll

Requirements

• Windows PowerShell 5.1 or PowerShell 7+

Basic Usage

1. Download the script to your target system (or git clone).
2. Open PowerShell as Administrator.
3. Navigate to the script directory.
4. Unblock the file (required for downloaded scripts):

Unblock-File .\UACConvert.ps1

Run the script from the folder where it lives:

.\UACConvert.ps1 -Help

Decode (value -> flags)

.\UACConvert.ps1 -Decode -Value 514
.\UACConvert.ps1 -Decode -Value 0x202

Show all flags (set and unset):

.\UACConvert.ps1 -Decode -Value 514 -ShowAll

Encode (flags -> value)

.\UACConvert.ps1 -Encode -Flags NOT_DELEGATED
.\UACConvert.ps1 -Encode -Flags NORMAL_ACCOUNT,ACCOUNTDISABLE

Interactive mode

.\UACConvert.ps1 -Interactive

Options (same as -Help)

Options:
-Decode Decode a UAC value into flags
-Encode Encode flags into a UAC value
-Value UAC value to decode (e.g. 514 or 0x202)
-Flags Flag names to encode (e.g. NORMAL_ACCOUNT,ACCOUNTDISABLE)
-ShowAll Show all flags (set and unset) on decode
-Interactive Use the interactive prompt
-Help Show this help and examples
Examples:
.\UACConvert.ps1 -Decode -Value 514
.\UACConvert.ps1 -Decode -Value 0x202 -ShowAll
.\UACConvert.ps1 -Encode -Flags NOT_DELEGATED
.\UACConvert.ps1 -Encode -Flags NORMAL_ACCOUNT,ACCOUNTDISABLE
.\UACConvert.ps1 -Interactive

Example Output

Decode:

Decoded UAC value:
InputDecimal: 514
InputHex: 0x202
Name Hex Decimal IsSet Description
---- --- ------- ----- -----------
NORMAL_ACCOUNT 0x200 512 True Typical domain user account
ACCOUNTDISABLE 0x2 2 True User account is disabled
Value breakdown (sum of flags):
514 = NORMAL_ACCOUNT=512 + ACCOUNTDISABLE=2

Decode (-ShowAll):

Decoded UAC value:
InputDecimal: 514
InputHex: 0x202
Name Hex Decimal IsSet Description
---- --- ------- ----- -----------
SCRIPT 0x1 1 False Logon script will be executed
ACCOUNTDISABLE 0x2 2 True User account is disabled
HOMEDIR_REQUIRED 0x8 8 False Home directory is required
LOCKOUT 0x10 16 False Account is locked out
PASSWD_NOTREQD 0x20 32 False No password is required
NORMAL_ACCOUNT 0x200 512 True Typical domain user account
WORKSTATION_TRUST_ACCOUNT 0x1000 4096 False Workstation/computer account
Value breakdown (sum of flags):
514 = NORMAL_ACCOUNT=512 + ACCOUNTDISABLE=2

Encode:

Encoded UAC flags:
ValueDecimal: 514
ValueHex: 0x202