All,
I created an user account lockout report for our help desk to use so that they can find out why the user was locked out. This report looks at user lockout events. It will list who is locked out and which system the lockout originated from.
I had to use a SQL query in order to strip out the user and the system where the lockout originated from. I don't believe string manipulation is supported in SWQL.
Hopefully this will help someone else out there.
Thank you,
Kurt
