cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 10

Account Lockout Events

Hi All,

I have added a AD server in SAM and AD security monitoring is enabled. i can able to see locked accounts Whether it is possible to see from which server it is locked ?kindly help.

0 Kudos
2 Replies

as long as this information is somewhere stored in the Event that Solarwinds is analyzing, you should be able to pull that information. Other than that, Solarwinds is just analyzing your Events.

LEM would be the better Product to use here I guess.

EDIT: Sorry my mistake, the Locked Out Status is pulled via Powershell. I am not too familiar with the AD Powershell cmdlets but if you have the option in the Powershell you could adjust the script to give you the Server from where the User entered the wrong password and is now locked.

0 Kudos

Anyone  monitoring this?

0 Kudos