Additional user account information in Active Directory

This is not just nice, this is needed for the support person and/or system administrator. See bad password count, when the password was last changed and when it will expire and other useful stuff with this handy "add-on" to the user account properties. You can use ADSI Edit of course, but far from all are used to it (or even know it exists).

First off, download this file: acctinfo.dll SHA-1: 5e2dd255a20e2b98a339450367499730fef24cc7 SHA-256: 7c9c9e525b5156dac288f7228584f190a3d1a3ade58f382a2598012894156f7a Then copy the file to the %systemroot%\system32 folder. Click Start > Run and enter the following command: regsvr32 %systemroot%\system32\acctinfo.dll Now close and then open Active Directory Users and Computers, and open properties of a user object. There should be an extra tab called Additional Account Info. This is per machine and needs to be done on all machines you want this tab on and make sure you have the proper permissions to register services on that/those machines. But if you administer Active Directory I assume you already have them. I also noticed that this tab does not show if you open the user object properties from a search window. If you for some reason do not like this extra tab, you can unregister the dll: regsvr32 /u %systemroot%\system32\acctinfo.dll You will get info like this on the tab:
  • When the password was last set and when it expires
  • Account status (512 = Enabled, 514 = Disabled, 66048 = Cannot be locked out)
  • If the account is locked out or not (Locked: Yes/No)
  • The SID and GUID
  • Last logon and logoff
  • Logon count and Bad Password count