Results 1 to 5 of 5

Thread: Show locked out accounts in ad mmc

  1. #1
    Join Date
    Feb 2006
    Posts
    106

    Show locked out accounts in ad mmc

    I was thinking it it was possible to show what users are currently locked out in am MMC for users and computers? I have delegated the rights to unlock accounts. However, due to different hours the persons that now can unlock an account is not always available and the account gets locked out. It will be fine if that person just can open their OU look at the user accounts there and check if anyone got locked out last night. Thanks

  2. #2
    Join Date
    Oct 2004
    Posts
    1,342

    Re: Show locked out accounts in ad mmc

    I dont think that accounts lock out themselves. There could be always some reason for wrong password attempt, etc. Incase you dont care about who has control about you can just disable that option in the GPO. So that no accounts will lock out, which is not recommended. But if anyone is able to unlock the account, then it will be a useless feature.

  3. #3
    Join Date
    Nov 2005
    Posts
    403
    You will just need to set the accounts to unlock themselves after 10 minutes in Account Lockout Policy. There is a plenty of time to stop someone from trying to break into your accounts. Just go to Default Domain Policy > Computer Configuration > Windows Settings > Security Settings > Account Policies > Account Lockout Policy and set the Account Lockout Duration to 10 minutes and Account Lockout Threshold to 25 invalid attempts and Reset Account Lockout Counter After to 10 minutes.

  4. #4
    Join Date
    Oct 2005
    Posts
    449
    To search for locked-out user accounts, you need to first query Active Directory Directory Services (AD DS) for user accounts. Then go through the user accounts querying the IsAccountLocked property, and print out the distinguishedName attribute of the user. Check for some more information from here - http://blogs.technet.com/b/heyscript...-accounts.aspx

  5. #5
    Join Date
    Aug 2006
    Posts
    84
    Try to checkout the account lockout tools from the below link:

    http://technet.microsoft.com/en-us/l...72(WS.10).aspx

    http://www.microsoft.com/en-us/downl....aspx?id=18465

    Also, there could be some issues with the conficker, so go through the below link to solve that issue incase:

    http://support.microsoft.com/kb/962007

Similar Threads

  1. Hotmail accounts just show only folders, no email
    By Lady D in forum Windows Software
    Replies: 1
    Last Post: 14-07-2012, 11:19 AM
  2. All domain accounts are locked in my network
    By CaspaR in forum Window 2000 Help
    Replies: 2
    Last Post: 24-11-2010, 11:10 PM
  3. User accounts getting locked out frequently
    By Tom Edelbrok in forum Windows Server Help
    Replies: 4
    Last Post: 26-09-2010, 10:42 AM
  4. Replies: 2
    Last Post: 22-07-2009, 11:55 PM
  5. Locked out of User Accounts after Vista to XP restore
    By lguthrie98 in forum Operating Systems
    Replies: 4
    Last Post: 16-05-2009, 10:31 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,616,586.90838 seconds with 17 queries