NT/2000 User Accounts

Flashback · Post by **Flashback** » Tue Oct 29, 2002 11:06 pm

Would it be possible to check the status of an NT/2000 user account? ie if it's Disabled/Locked Out/Enabled?

KS-Soft · Post by **KS-Soft** » Wed Oct 30, 2002 12:02 am

I don't think so.

Regards
Alex

mpriess · Post by **mpriess** » Wed Oct 30, 2002 12:39 pm

You can monitor the NT security event log on the primary domain controller as the events are logged. For example: To get notified when an account gets locked....setup an event log test that searches for:

Source: Security
Event ID: 644
Then search for the text "User Account Locked Out"...
You could also search for the account name as well if you wanted to get more granular.

Hope this helps...

jricha34 · Post by **jricha34** » Mon Nov 11, 2002 3:32 pm

Take a look at http://www.joeware.net, there are lots of tools there that you might be able to wrap in a script to get to what you want.