Monitor Domain or NT Accounts for Locked out status

[Roopesh_Shetty]

Hi

We have recieved a request for monitor few service accounts (Windows domain NT accounts) so that they need the alert to be triggered when those accounts gets locked out. So Is there any way in sitescope where we can monitor account locked out issues?. Kindly advice.

regards

roopesh

[anoopambli]

I do not know if there is any out of box solution but this what i did in our evn.

A script monitor which runs a powershell script, here is the content of it. Response of the monitor would be true or false.

Import-Module ActiveDirectory

(get-aduser <accountname> -Properties LockedOut).lockedout

[Roopesh_Shetty]

Hi Anoop,

Thanks for the response, could you please tell me can we run this script on any server or only in sitescope server or in exchange server , also please confirm us if the script should like this . (we only modified the <accountname> with complete email id as svc_oracle@xyz.com  is our service account)

Import-Module ActiveDirectory

(get-aduser svc_oracle@xyz.com -Properties LockedOut).lockedout