is there a way to trigger an AD scan via script file?
When an AD account is locked, this is not visible in ARM in real time.
However, it is possible to activate an alarm which is triggered when an AD account is locked. The alarm can then be used to start a script.
In this way, locked AD accounts would be immediately visible in the ARM.