Finding Computer of Locked Out User(s) - PowerShellCommunity.org - Windows PowerShell Discussion Forums - Using PowerShell

Forums Search Members

Finding Computer of Locked Out User(s)

Last Post 15 Jul 2008 06:33 PM by bsonposh. 3 Replies.

Sort:

	Prev Next
You are not authorized to post a reply.

Author

Messages

zactek

New Member
Posts:2

15 Jul 2008 03:29 PM
I was wondering if anyone has ever seen a script and/or combination of scripts that would help you tell which computer an Active Directory user is getting locked out on. I need something more than the Microsoft Locked Out User tools. Any help would be appreciated!

bsonposh

Basic Member
Posts:388

15 Jul 2008 04:03 PM
Interesting problem. There is nothing in AD that I can think of to use. Of the top of my head, parsing the eventlogs of each DC would be your best bet. Depending on your AD Structure this could be simple or complex, but doable.

zactek

New Member
Posts:2

15 Jul 2008 05:05 PM
Brandon, I've tried the Microsoft tools and they leave alot to be desired. I am still having problems with the amount of data that we need to sift though using the eventComb tool that comes in the ALTools.exe download. The other Lockoutstatus.exe tool let's me find out which DC that the user logged into to, but I can't resolve that down to where the computer the account tried to login from. Any help is appreciated! Thank You, Zach Crawford

bsonposh

Basic Member
Posts:388

15 Jul 2008 06:33 PM
I may be wrong, but I am pretty sure the the failure audits for the user will contain the computer they were attemped from.

You are not authorized to post a reply.

Active Forums 4.1