ICT-Hotlist Topic

   No-one locked out

  Name  Since               Locked Out
  Johan 2015-11-16 22:29:37 True

# This PowerShell script determines if someone is locked out from the
# Active Directory, and when the situation occurred:
# It reports
#    No-one locked out
# or a list of:
#    Name  Since               Locked Out
#    Johan 2015-11-16 22:29:37 True
# (C)Copyrights 2015 - 2025 vanSoest.it by J. van Soest.

# Load the Active Directory PowerShell module.
Import-Module ActiveDirectory
# Clear the screen so the data is nicely presented.
cls
Write-Host "This PowerShell script determines if someone is locked out from the "
Write-Host "Active Directory, and when the situation occurred:"

# Define an object and load it with all the users currently locked out
$LOUsers = Search-ADAccount -lockedout

# Check if the object contains any members
if ( $LOUsers -ne $null ) {
# Object contains members so write the table headers on the screen (tab seperated)
    Write-Host "Name`tSince`tLocked Out"
# Now loop through all the members and write data to screen tab formatted.
    foreach ($LOUser in $LOUsers){
        $Usr = Get-ADUser $LOUser -Properties *
        $Time = $Usr.lockoutTime
# Format the Active Directory date number using the filesystem datetime object
        $strTime = [datetime]::FromFileTime($Time).ToString("yyy-MM-dd HH:mm:ss")
        Write-Host $Usr.Name,"`t",$strTime,"`t",$Usr.lockedout
    }

}
else{
# The object is empty. So no one is locked out.
    Write-Host "No-one locked out"
}