Anthony K O365
asked on
AD account lockouts
Trying to find All users whose AD account is being locked out by a particular machine via Powershell Script.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I created a script that would automatically send me an email in event of any account is getting locked out, if you want I can post the script and instructions. I am not so good in PS so I can't create you the exact script you are looking for
See the PowerShell script in my article
https://www.experts-exchange.com/articles/29305/Active-Directory-Locked-Account-Investigation-Process.html
https://www.experts-exchange.com/articles/29305/Active-Directory-Locked-Account-Investigation-Process.html
ASKER
this was very helpful
Also check out Microsoft's free tool called Account Lockout and Management Tools.
Here are some more references for possible causes for account lockouts :
https://emtunc.org/blog/07/2015/find-out-why-an-ad-account-keeps-locking-out/
https://blogs.technet.microsoft.com/heyscriptingguy/2011/08/31/use-powershell-to-find-locked-out-user-accounts/
http://mikefrobbins.com/2013/11/29/powershell-script-to-determine-what-device-is-locking-out-an-active-directory-user-account/
Here are some more references for possible causes for account lockouts :
https://emtunc.org/blog/07/2015/find-out-why-an-ad-account-keeps-locking-out/
https://blogs.technet.microsoft.com/heyscriptingguy/2011/08/31/use-powershell-to-find-locked-out-user-accounts/
http://mikefrobbins.com/2013/11/29/powershell-script-to-determine-what-device-is-locking-out-an-active-directory-user-account/
Track Source and Cause of Active Directory Account Lockouts:
https://www.lepide.com/how-to/identify-the-source-of-account-lockouts-in-active-directory.html
Use PowerShell to Find the Location of a Locked-Out User:
https://blogs.technet.microsoft.com/heyscriptingguy/2012/12/27/use-powershell-to-find-the-location-of-a-locked-out-user/
How to Troubleshoot Account Lockout in Active Directory:
http://expert-advice.org/active-directory/how-to-troubleshoot-account-lockout-in-active-directory/
https://www.lepide.com/how-to/identify-the-source-of-account-lockouts-in-active-directory.html
Use PowerShell to Find the Location of a Locked-Out User:
https://blogs.technet.microsoft.com/heyscriptingguy/2012/12/27/use-powershell-to-find-the-location-of-a-locked-out-user/
How to Troubleshoot Account Lockout in Active Directory:
http://expert-advice.org/active-directory/how-to-troubleshoot-account-lockout-in-active-directory/
ASKER