The status field in ost_user_account is a bitwise flag combination, from include/class.user.php
const CONFIRMED = 0x0001;
const LOCKED = 0x0002;
const REQUIRE_PASSWD_RESET = 0x0004;
const FORBID_PASSWD_RESET = 0x0008;
1 = confirmed.
5 = password reset required + confirmed.
9 = password may not be reset + confirmed.