Account Lockout Status Tools

374 views
Skip to first unread message

Michael B. Smith

unread,
Jun 25, 2021, 2:05:49 PM6/25/21
to ntsys...@googlegroups.com

Has anyone used the Microsoft Account Lockout Status tools anytime recently?

 

https://www.microsoft.com/en-us/download/details.aspx?id=18465

 

The ADUC add-in works, but the client tools don’t seem to. Anyone have any insight?

 

Roberts, James

unread,
Jun 25, 2021, 3:24:47 PM6/25/21
to ntsys...@googlegroups.com

Working fine for me on 20H2.

 

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> On Behalf Of Michael B. Smith
Sent: Friday, June 25, 2021 1:06 PM
To: ntsys...@googlegroups.com
Subject: [EXTERNAL] [ntsysadmin] Account Lockout Status Tools

 

This message is from an external sender; be cautious with links and attachments.

Has anyone used the Microsoft Account Lockout Status tools anytime recently?

 

https://www.microsoft.com/en-us/download/details.aspx?id=18465

 

The ADUC add-in works, but the client tools don’t seem to. Anyone have any insight?

 

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ntsysadmin/b20eedebdd75445084ada2bd7c412935%40smithcons.com.

Michael B. Smith

unread,
Jun 28, 2021, 10:19:37 AM6/28/21
to ntsys...@googlegroups.com

Huh. What’s your special sauce, if you don’t mind saying?

 

You copy ALockout.dll to %SystemRoot%\System32 and run Appinit.reg (once per system and then reboot).

 

You run EnableKerbLog.vbs as a start up script from GPO (every log in).

 

Anything else?

 

Thanks.

Roberts, James

unread,
Jun 28, 2021, 11:17:32 AM6/28/21
to ntsys...@googlegroups.com

Nothing except run it.

Roberts, James

unread,
Jun 28, 2021, 11:42:40 AM6/28/21
to ntsys...@googlegroups.com

I think I misread this. Sorry about that.

 

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> On Behalf Of Michael B. Smith

Sent: Monday, June 28, 2021 9:20 AM

Michael B. Smith

unread,
Jun 28, 2021, 11:44:18 AM6/28/21
to ntsys...@googlegroups.com

I figured it out. You don’t run Secure Boot. 😊

 

It’s disabled by default if Secure Boot is enabled since Win8. Have to add two additional registry keys:

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="c:\\users\\michael\\downloads\\alockout.dll"

"LoadAppInit_DLLs"=dword:00000001

"RequireSignedAppInit_DLLs"=dword:00000000

Roberts, James

unread,
Jun 28, 2021, 11:50:24 AM6/28/21
to ntsys...@googlegroups.com

Yeah running in a VM.

Thanks

Kurt Buff

unread,
Jun 28, 2021, 12:10:54 PM6/28/21
to ntsys...@googlegroups.com
Well that's good to know. Nice find.

Kurt

To view this discussion on the web visit https://groups.google.com/d/msgid/ntsysadmin/d9c12a4b672648588dae96138bbd967d%40smithcons.com.
Reply all
Reply to author
Forward
0 new messages