Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > AD user account lockout report using LEM

AD user account lockout report using LEM

Table of contents
Created by Craig O’ Neill, last modified by James Moore on Oct 05, 2018

Views: 3,341 Votes: 0 Revisions: 6

Updated: October 5, 2018


This article briefly outlines how to generate a report showing AD user account lockouts using LEM reports and nDepth.


  • All LEM versions
  • Active Directory


If using nDepth, run the following search:

UserDisable.EventInfo = *Account Lock*

If using LEM Reports, use the following LEM Report:

Change Management - General Authentication: User Account Events - User Disabled



Last modified