Account-Expires Attribute Calculator
'/%3E%3Ccircle cx='48' cy='39' r='19' fill='%23f2c9a5'/%3E%3Cpath d='M27 35c3-16 39-17 42 2-8-8-27-9-42-2z' fill='%23374151'/%3E%3Cpath d='M21 86c5-24 49-28 56 0z' fill='%232563eb'/%3E%3Ccircle cx='41' cy='41' r='2' fill='%23111827'/%3E%3Ccircle cx='55' cy='41' r='2' fill='%23111827'/%3E%3Cpath d='M42 52c4 3 9 3 13 0' stroke='%2392400e' stroke-width='3' fill='none' stroke-linecap='round'/%3E%3C/svg%3E)
Reviewed by Calculator Editorial Team
The Account-Expires attribute in LDAP (Lightweight Directory Access Protocol) and Active Directory is a timestamp that specifies when a user account will expire. This calculator helps you convert the Account-Expires value to a human-readable date and time.
What is the Account-Expires Attribute?
The Account-Expires attribute is a 64-bit integer that represents the date and time when a user account will expire. This attribute is commonly used in Windows Active Directory to implement temporary or time-limited accounts.
The value is stored as the number of 100-nanosecond intervals since January 1, 1601 (UTC). This format is known as the Windows FILETIME format.
Note: An Account-Expires value of 0 or 9223372036854775807 indicates that the account never expires.
How to Use This Calculator
To use this calculator:
- Enter the Account-Expires value from your LDAP or Active Directory record
- Select the time zone where the account is located
- Click "Calculate" to convert the value to a human-readable date and time
The calculator will display the expiration date in both local time and UTC, along with a countdown to expiration.
Formula Used
The Account-Expires value is converted to a date using the following formula:
Expiration Date = (Account-Expires Value - 116444736000000000) / 10000000
Where:
- Account-Expires Value is the 64-bit integer from the attribute
- 116444736000000000 is the number of 100-nanosecond intervals between January 1, 1601 and January 1, 1970 (Unix epoch)
- 10000000 converts from 100-nanosecond intervals to milliseconds
The resulting Unix timestamp is then converted to a human-readable date using the selected time zone.
Worked Examples
Here are some example calculations:
| Account-Expires Value | Expiration Date (UTC) | Expiration Date (Local Time) |
|---|---|---|
| 132384576000000000 | 2022-01-01 00:00:00 | 2021-12-31 19:00:00 (EST) |
| 132401856000000000 | 2022-01-03 00:00:00 | 2022-01-02 19:00:00 (EST) |
| 9223372036854775807 | Never expires | Never expires |
These examples show how different Account-Expires values translate to human-readable dates.
Frequently Asked Questions
- What does an Account-Expires value of 0 mean?
- An Account-Expires value of 0 means the account never expires. This is the default setting for most accounts.
- How do I set an account to expire?
- To set an account to expire, you need to calculate the desired expiration date in FILETIME format and set it as the Account-Expires attribute value.
- Can I use this calculator for other LDAP attributes?
- This calculator is specifically designed for the Account-Expires attribute. Other LDAP attributes may require different conversion methods.
- What time zones does this calculator support?
- The calculator supports all major time zones, including UTC and common regional time zones.
- Is the Account-Expires attribute supported in all LDAP servers?
- The Account-Expires attribute is primarily used in Windows Active Directory. Other LDAP implementations may not support this attribute.