Unlocking Locked Out accounts using PowerShell (not with Quest AD cmdlets)

Question 1

I’m writing a GUI tool using PowerShell that is able to do most AD related tasks with just a user name and button click. I’ve done all the usual ones (Create / Remove Users, Create / Remove Security & Distribution Groups, Resetting Passwords, etc) but can’t find away of unlocking a “Locked Out” account.

I’m trying to do this without using Quest AD cmdlets as I want a more stand alone solution. So I’m wondering whether is possible with plain PowerShell (1.0 or 2.0) in a Windows 2003 Domain.

Many thanks.

Question 2

Set the lockoutTime property of the DirectoryEntry to 0.

Sample:

$x = [ADSI]'LDAP://SomeDN'
$x.lockoutTime = 0
$x.CommitChanges()
$x.Close()

1

2

3

4

5

$x = [ADSI]'LDAP://SomeDN'

$x.lockoutTime = 0

$x.CommitChanges()

$x.Close()

Unlocking Locked Out accounts using PowerShell (not with Quest AD cmdlets)

Question:

Answer:

Source:

Unlocking Locked Out accounts using PowerShell (not with Quest AD cmdlets) by stackoverflow.com licensed under CC BY-SA | With most appropriate answer!

Leave a Reply Cancel reply