Several accounts seem to contain conflicting
information (though it is just as likely faulty interpretation of the
information on my part) with respect to their lockout status. ADUC
reports these accounts as not locked, as does "Unlock" from joeware, but the
Account Lockout Status tool from Microsoft reports these accounts as locked and
the user object.lockoutTime is not 0 (that is the value I've been
monitoring with a _vbscript_). On the users side sometimes they report they
are locked out and sometimes they are not.
First, is this normal (the conflict)?
Second, is the "lockoutTime" the setting I need to monitor or is there some
other place I need to look? Third, how do I get the tools to report the
same information or should I consider certain tools suspect?
David Aragon
