List locked out accounts in Active Directory


write-host
write-host "Locked out accounts"
write-host "###################"

$dn = "dc=$args[0],dc=druidsys,dc=com" #replace with your domain
$domain = "LDAP://$dn"
$root = New-Object System.DirectoryServices.DirectoryEntry $domain
$query = new-Object System.DirectoryServices.DirectorySearcher
$query.searchroot = $root
$objClass = $query.findall() | Where-Object {$_.properties.objectclass -eq "user" -and $_.properties.lockouttime -ge 1}

foreach ($user in $objClass) {

$prop = $user.properties
write-host $prop.samaccountname
}

write-host