Account Lockout and Management Tools

Account Lockout and Management Tools is a free set of tools provided by Microsoft to help troubleshoot account lockout problems. The Microsoft Lockout Tools includes 7 add-ons and tools to help troubleshoot account lockout issues.

The Account Lockout and Management Tools is an extracted executable called ALTools.exe. This file can be downloaded from the Microsoft download center. Once ALTools.exe is downloaded you will extract the file to a directory of your choice. These tools can be installed on a domain controller, member server or a workstation.

Accinfo.dll
This DLL file will add a new tab to Active Directory Users and Computers called Additional Account info. The tab adds lots of information about users logon details, password details, logon count, bad password count, etc.

ALockout.dll
This tool will create a log file that will help troubleshoot account lockout problems. It can help determine a process or application that is sending wrong credentials.

ALoInfo.exe
This tool displays all user account names and the age of their passwords. You can use tool this to determine which accounts are about to expire.

EnableKerbLog.vbs
Used as a startup script, allows Kerberos to log on to all your clients that run Windows 2000 and later.

EventCombMT.exe
This tool gathers event logs from several machines to one central location. You can create filters for searching specific event IDS across all servers.

LockoutStatus.exe
Displays various information about locked out accounts. LockOutStatus.exe uses the NLParse.exe tool to parse the Netlogon logs for specific Netlogon return status codes. What I like best about this tool is it will tell me which Domain Controller the account was locked out on first. It also determines all the Domain Controllers that are involved in a lockout.

NLParse.exe
Used to extract and display entries from the Netlogon log files.

Company: Microsoft
Website: Account Lockout and Management Tools