4 thoughts on “Account lockout

  1. JM


    Thanks for sharing your suggestions.

    By the way, recently one of my Microsoft colleagures informed us about a cool FREE tool from a Microsoft partner, that offers over 50 super-helpful Active Directory security reports including which accounts are locked out, where all a user may have permissions etc.

    So, there’s no more need to write any scripts and all to find the DN of locked accounts. You can just use this tool and it will automatically show you the DN of all locked accounts!

    The tool is called Gold Finger, and it is developed by a company called Paramount Defenses. You can download it from http://www.paramountdefenses.com/goldfinger.php

    If you’re into Active Directory security, then this tool is a must-have. Best of all its FREE, SUPPORTED and ENDORSED by Microsoft!

    Thought I’d share this helpful tip with you!


  2. MarcJ

    Hi Ganesh,

    How are you? I came across your post while looking for free Active directory reporting tools on Account Lockout and True Last Logon.

    Ganesh, I run a blog on a Free Active Directory Reporting Tools and if you know of any free True LAst Logon based tools, could you please let me know, so I could post it on my blog and share it with the entire community.

    Thanks, and look forward to hearing from you soon.


  3. Shanmugam


    Nice article, and I am aware of Microsoft lockstatus.exe and other tools, but hearing first time these commands to query active directory..

    Here is a free tool called lockout fixer which lets users to quickly find where the account lock outs are coming from

  4. Anonymous

    I’m looking for a third-party tool to identify and resolve all account lockouts. The only one I’ve evaluated so far is NetWrix Account Lockout Examiner, which is so far, so good—it identifies user lockouts, troubleshoots the issue and resolves the issue. Anyone have any other good recommendations that I can compare?


Leave a Reply

Your email address will not be published. Required fields are marked *