Solved

Can I lockout multiple accounts in AD at the same time?

Posted on 2007-11-18
5
238 Views
Last Modified: 2010-03-17
Due to a recent security review I need to lockout (not disable) about 150 accounts in AD. The only way I can see to do that is to manually attempt an incorrect password 4 or 5 times for each account. There must be an easier way?
0
Comment
Question by:peterfa
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 125 total points
ID: 20309598
You cant "lock out an account" without the password attempts - that i am aware of anyway

why not just grab all the accounts, and expire them....you can bulk change that attributee easily enough
0
 

Author Comment

by:peterfa
ID: 20309620
that sounds promising.....do you know if email still works on an expired account? For example if after expiring it someone sends an email to that person will it still send an email back to the sender saying they are on maternity leave or whatever?
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20309647
that i couldnt tell you to be honest....i beleive it disables the account taking a closer look...if you need an account enabled for mail but not being able to do anything else do what i do

New OU named restricted users
move all acounts into it
Grab all the accounts, and under the account tab - logon to - specify a computer that doesnt exist
You can also apply a policy which annihilates them doing anything at all
and mail still works :)
0
 

Author Comment

by:peterfa
ID: 20309665
I just tested it and mail works fine on an expired account, that looks the best solution  - thanks for your help
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20309676
excellent, thanks for clarifying as i didnt know that either :)

Cheers mate
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question