Work in progress!
Tools Project
In – Dev state.
Active-Directory
Locked Out User
This is a script that gives you the names of any locked out users.
It’s based on older methods and now is antiquated with the arrival of PowerShell V3+
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
$adsiSearcher = New-Object DirectoryServices.DirectorySearcher("LDAP://rootse") $adsiSearcher.filter = "ObjectCategory=User" $adsiSearcher.findAll() | ForEach-Object ` -Begin ` { "Locating locked out User accounts ..." $UserCount = 0 } ` -Process ` { If( ([adsi]$_.path).psbase.invokeGet("IsAccountLocked") ) { ([adsi]$_.path).DistinguishedName + " is locked out" $UserCount ++ } } ` -End ` { "There were $userCount locked out User Accounts." } |