This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Account Lockout Events

Hi All,

I have added a AD server in SAM and AD security monitoring is enabled. i can able to see locked accounts Whether it is possible to see from which server it is locked ?kindly help.

  • as long as this information is somewhere stored in the Event that Solarwinds is analyzing, you should be able to pull that information. Other than that, Solarwinds is just analyzing your Events.

    LEM would be the better Product to use here I guess.

    EDIT: Sorry my mistake, the Locked Out Status is pulled via Powershell. I am not too familiar with the AD Powershell cmdlets but if you have the option in the Powershell you could adjust the script to give you the Server from where the User entered the wrong password and is now locked.