Edit

Introduction to Account Lockout and Management Tools

  • Article

This article introduces Account Lockout and Management Tools for Windows Server.

Applies to:   Windows Server 2019, Windows Server 2016, Windows Server 2012 R2
Original KB number:   4469275

Summary

This article introduces Account Lockout and Management Tools. This set of tools helps you manage accounts and troubleshoot account lockouts.

More information

The following files are included in the Account Lockout and Management Tools package:

  • AcctInfo.dll - Helps you isolate and troubleshoot account lockouts and change a user's password on a domain controller in that user's site. This tool adds new property pages to user objects in the Active Directory Users and Computers Microsoft Management Console (MMC).

  • ALockout.dll - On the client computer, helps determine a process or application that is sending wrong credentials.

    Important

    Do not use this tool on servers that host network applications or services. Also, you should not use ALockout.dll on servers that are running Microsoft Exchange Server because it may prevent the Exchange store from starting.

  • ALoInfo.exe - Displays the names and age of passwords for all user accounts.

  • EnableKerbLog.vbs - Used as a startup script by enabling Kerberos protocol to log on to all clients that run Windows 2000 and later versions of Windows.

  • EventCombMT.exe - Collects specific events from event logs of several different computers in one central location.

  • LockoutStatus.exe - To help collect the relevant logs, determines all the domain controllers that are involved in a lockout of a user account. LockoutStatus.exe uses the NLParse.exe tool to parse Netlogon logs for specific Netlogon return status codes. This tool directs the output to a comma-separated value (.csv) file that you can sort later.

  • NLParse.exe - Used to extract and display desired entries from the Netlogon log files.