Monitor Domain or NT Accounts for Locked out status
We have recieved a request for monitor few service accounts (Windows domain NT accounts) so that they need the alert to be triggered when those accounts gets locked out. So Is there any way in sitescope where we can monitor account locked out issues?. Kindly advice.
I do not know if there is any out of box solution but this what i did in our evn.
A script monitor which runs a powershell script, here is the content of it. Response of the monitor would be true or false.
(get-aduser <accountname> -Properties LockedOut).lockedout
Thanks for the response, could you please tell me can we run this script on any server or only in sitescope server or in exchange server , also please confirm us if the script should like this . (we only modified the <accountname> with complete email id as email@example.com is our service account)
(get-aduser firstname.lastname@example.org -Properties LockedOut).lockedout