LDAP filter 語法，windows ad 取出所有正常帳號

(&(objectCategory=person)(objectClass=user)(primaryGroupID=513)(|(useraccountcontrol=512)(useraccountcontrol=66048))))