Find the Source of Account Lockouts in Active Directory

Published: 27 June 2020
on channel: Active Directory Pro
64,581
337

In this video I'll show you how to find the source of account lockouts in Active Directory. User accounts that keep locking out can be very frustrating. I'm going to show you 3 solutions including PowerShell and a GUI tool for tracking down the source of account lockouts.

Overview of the steps:

Step 1: Enabling auditing for event 4740

Step 2: Find the domain controller that holds the PDC emulator role

get-addomain | select PDCEmulator

Step 3: Search event logs for event ID 4740

Get-WinEvent -FilterHashtable @{logname=’security’; id=4740}

Step 4: Display details of event

Get-WinEvent -FilterHashtable @{logname=’security’; id=4740} | fl

Step 5: Use event viewer (optional)

Step 6: Using The Unlock GUI Tool

The user unlock tool is a GUI tool that makes is easy to find all locked user accounts and display the source of the account lockout.

Get your copy of the User Unlock Tool for Active Directory
https://activedirectorypro.com/unlock...

Written version of this tutorial (Includes screenshots)
https://activedirectorypro.com/find-t...


Watch video Find the Source of Account Lockouts in Active Directory online without registration, duration hours minute second in high quality. This video was added by user Active Directory Pro 27 June 2020, don't forget to share it with your friends and acquaintances, it has been viewed on our site 64,581 once and liked it 337 people.