

Used to extract and display desired entries from the Netlogon log files. It directs the output to a comma-separated value (.csv) file that you can sort further, if needed. LockoutStatus.exe uses the NLParse.exe tool to parse Netlogon logs for specific Netlogon return status codes. Determines all the domain controllers that are involved in a lockout of a user in order to assist in gathering the logs. Gathers specific events from event logs of several different machines to one central location. As an example, run the following command in an elevated command prompt to install the RSAT Group Policy Management Tools, RSAT Active Directory Domain Services and Lightweight Directory Services Tools and RSAT DNS Server Tools. Used as a startup script, allows Kerberos to log on to all your clients that run Windows 2000 and later. Alternatively, RSAT tools can be installed using the built-in Windows DISM tool. Displays all user account names and the age of their passwords. Also, you should not use ALockout.dll on Exchange servers, because it may prevent the Exchange store from starting. On the client computer, helps determine a process or application that is sending wrong credentials.Ĭaution: Do not use this tool on servers that host network applications or services. It works by adding new property pages to user objects in the Active Directory Users and Computers Microsoft Management Console (MMC). Helps isolate and troubleshoot account lockouts and to change a user's password on a domain controller in that user's site. Use these tools in conjunction with the Account Passwords and Policies white paper. ALTools.exe contains tools that assist you in managing accounts and in troubleshooting account lockouts.
