+1 to the nth. joe is an awesome guy, most helpful and incredible to hang around in person just trying to absorb some of the knowledge he so freely shares in between cracking up because he is so hilarious. Don't get caught capitalizing his name or he will say you are referring to someone else. I am a huge fan of many of his tools but I must admit a particular partiality to oldcmp, maybe it's because he included my name in the usage screen, nah, that couldn't be it :-)
Seriously, if you have responsibility for AD you would do well to pick up some of his philosophy of the proper care and feeding of it from his blog, activdir and the newsgroups. Any books he authored or reviewed are also top-notch. Some people think his ideas are somewhat draconian but if you can run a Fortune 5 environment with 3 Domain Admins like he did you gotta be pretty darned good at it. -----Original Message----- From: Kennedy, Jim [mailto:[email protected]] Sent: Wednesday, March 11, 2009 5:43 AM To: NT System Admin Issues Subject: RE: Unlock accounts I ended up using unlock.exe from Joeware. Very hand exe, lets you do it by OU. Joe is on many of the lists (I think this one, certainly the AD list) and is a wonderfully helpful guy. His oldcomp is my favorite utility. http://www.joeware.net/freetools/index.htm > -----Original Message----- > From: Glen Johnson [mailto:[email protected]] > Sent: Wednesday, March 11, 2009 8:27 AM > To: NT System Admin Issues > Subject: RE: Unlock accounts > > When we were having the account lockout problem, I tried using the > powershell cmdlet referenced but it would show way to many accounts > were locked. > Turns out that this command "get-qaduser -locked" shows accounts that > are currently locked, and also accounts that have been locked but are > now unlocked but have not been logged into since the lockout. Not what > we needed. > I ended up using this script which seems to work well. > Search google for account_bulk_unlock.vbs and it will be the only link > returned. > > > -----Original Message----- > From: Steven Peck [mailto:[email protected]] > Sent: Tuesday, March 10, 2009 5:41 PM > To: NT System Admin Issues > Subject: Re: Unlock accounts > > http://dmitrysotnikov.wordpress.com/2007/08/14/enable-disable-unlock- > user-accounts/ > > > > On Tue, Mar 10, 2009 at 1:48 PM, Kennedy, Jim > <[email protected]> wrote: > > So one of the issues I have is 100's of accounts that are locked out. > Anyone have an idea or a script that I can fire to unlock everyone at > once? > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
