Skip to content

Check if an AD account is locked

If you want to quickly see if an account is locked, use this:

Get-ADUser <accountname> -Properties * | Select-Object LockedOut

NOTE: The accountname can have wildcards. Testing

There are other useful parameters on the Properties worth examining.

  • passwordlastset - when was the password last set?
  • passwordneverexpires - does the password expire sometime?