Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Log & Event Manager (LEM) > AD user account lockout report using LEM

AD user account lockout report using LEM

Table of contents
Created by Craig O’ Neill, last modified by MindTouch on Jun 23, 2016

Views: 276 Votes: 0 Revisions: 4

Overview

This article briefly outlines how to generate a report showing AD user account lockouts using LEM reports and nDepth.

Environment

  • All LEM versions
  • Active Directory

Steps

Using nDepth:

Run the following search:
UserDisable.EventInfo = *Account Lock*
 

Using LEM Reports:

Use the following LEM Report..

"Change Managent - General Authentication: User Account Events - User Disabled" report

 

 

Last modified
19:53, 22 Jun 2016

Tags

Classifications

Public