Locked Out AD Accounts

Question

User1504639868 posted

Can someone provide me with a Log Parser query, which would interrogate a server security.evtx file and pull out all AD accounts that are locked out, the date these accounts were locked out and from what PC (Host Name) or the Computers IP Address the lock out occured?

 

Thanks

Answer 1

User-736483138 posted

There are utilities that can do this. Take a look at this blog post for additional information.