如何使用C#过滤掉Active Directory中的内置用户(访客)和组(管理员)？

using System.DirectoryServices;

DirectoryEntry domain = new DirectoryEntry("LDAP://<域控制器地址>");

DirectorySearcher searcher = new DirectorySearcher(domain);
searcher.Filter = "(&(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";

SearchResultCollection results = searcher.FindAll();

foreach (SearchResult result in results)
{
    // 处理符合条件的用户
    string username = result.Properties["sAMAccountName"][0].ToString();
    Console.WriteLine(username);
}