Working with userAccountControl

The LDAP attribute userAccountControl controls most of the Account Options of Active Directory User objects. The value is a binary number, and each bit controls various options as outlined in this Microsoft support article.

This attribute can be searched on by using bit-wise and/or LDAP searches.

This bits of this attribute can NOT be set individually.

These articles related to userAccountControl add insight into how they are handled by ldap.
Selectively syncing Disabled or Enabled source AD Users
Creating Disabled or Enabled Active Directory (AD) User Objects with UnitySync