Find All Locked-Out Accounts

This explain how, by the use of Active Directory Saved Queries, you can quickly get a list of all locked out user accounts.

1. Open the Active Directory Users and Computers console
2. Right-click on Saved Queries in the console tree and select New –> Query.
3. Type a name and description for the query
4. Specify a query root (where in your namespace your query begins searching)
5. Click the Define Query button.
6. Since there’s no default option for finding locked-out accounts in the Common Queries box, select Custom Search instead to open the Find Custom Search box. Then select the Advanced tab and enter the following LDAP string in the Enter LDAP Query textbox:

(&(objectCategory=Person)(objectClass=User)(lockoutTime>=1))

7. Click OK twice to create and run the saved query.

Locked out of Windows server…no local or RDC logon allowed!?

Try this hack:
 log in to the recovery console.
 in recovery console:
cd system32
 “go to system32 folder.”

 copy logon.scr c:\
 copy cmd.exe c:\
“make a copy of  “login.scr and cmd.exe” to the root of drive c:”

ren logon.scr logon.sc2
ren cmd.exe logon.scr
“Change the name of logon.scr to cmd.exe”

exit
“restart the server”

 Now wait for the logon screen saver to start, it will start with CMD.EXE under local service account, in the command prompt type mmc.exe to have GUI for the MS management snapins, or via the command prompt.

 

A tip by a man named Doron