I know how on a new user create to use the pseudo attrs to set bits in
the User Account Control attribute bitmask.

But saw on a user disable, I need to set it back to a specific value.
How would I clear ALL the current values, and set it explicitly to the
values desired?

Set all the RW pseudo attrs to false, and then set the ones I want to true?

Write direct to userAccountControl with a value of 0?

Any thoughts?