walt @ truman :: blog

Here is a simple perl script to monitor the number of locked accounts in your Active Directory domain. This script uses unlock.exe which is availabe from JoeWare.net.

If the number of locked accounts exceeds the defined threshold the script will notify you via e-mail.

Requirements:

1. Windows 2003 / Windows XP / Windows 2000
2. Perl installed
3. Unlock.exe in path
4. SMTP server for e-mail notificaiton

Instructions:
Modify these lines below to your desired settings and to match your enviroment:

$lockedThreshold = 10;
$unlockCmd = "unlock.exe . * -view 2>NUL";
@notifyList = qw(
admin
);
$mailFrom = "AccountLockout";
$mailSubject = "Account Lockout Alert";
$mailServer = "mailserver.domain.com";

Download:
Locked Account Monitor.pl