https://johnpili.com/active-directory-useraccountcontrol-flags/