Guy Recommends
A solution to monitor, manage and archive thousands of
events that are generated by devices across the entire network.
Download FREE
trial
Introduction to Additional Account Info - Acctinfo.dll
What Acctinfo.dll does for you is expose more properties
in ADUC (Active Directory Users and Computers), for example lastLogon and Password Expires. Specifically, with this add-on you get an extra tab in ADUC called Additional Account Info. What led me to
discover this treasure called acctinfo.dll was research into an LDAP property called lastLogon. The reason that I have not used acctinfo.dll previously is that whenever I need to investigate such hidden Active Directory attributes, I launch ADSI Edit.
Topics for Additional Account Info (c.dll)
Our mission is to add an extra tab to ADUC (Active Directory Users and Computers). Amongst the extra information on this tab is, the lastLogon time, UserAccountControl value and Bad
Password Count.
All we need to display this extra information is to obtain a dynamic link-library file called acctinfo.dll, copy it to the correct folder and then register the service. Here are detailed instructions to
achieve our mission: Download
acctinfo.dll or acctinfo in zip format Copy acctinfo.dll to the %systemroot%\system32 folder Register the service and dll with this command:
regsvr32 acctinfo (Similar to registering the schema snap-in) Close, then open Active Directory Users and Computers. Look for an extra tab called Additional Account Info.
Note 1: My information is that you need to install acctinfo on the machine where you execute the
ADUC snap-in. Note 2: In line with
modern best practice, once you have registered acctinfo, there is no need to reboot your server. Note 3: If you wish to remove the Additional Account Info tab, open a Run dialog box and then type:
regsvr32 /u acctinfo Note 4: Acctinfo is supplied free by Microsoft.
- Password Last Set and Password Expires
- User Account Control, for example a value of 512 means enabled or 514 disabled. Also a value of 66048 (see diagram) means that the account cannot be locked out.
- Whether the account has been locked out - or not. (Locked: No)
- SID and GUID
- Last Logon, Logoff times
- Logon Count, Bad Password Count
 Guy
recommends: The SolarWinds ipMonitor
My attraction to
ipMonitor is
because it inhabits that zone of part work, part
play; Guy just could not put the dashboard away. This excellent performance
monitor will get you started in the quest to remove bottlenecks on your network. SolarWinds provides this fully-functioning product free for 21 days. So
download
and install ipMonitor, then start scrutinizing your computers CPU, memory and disk
performance. You can also select from zillions more performance counters such as
fan temperature and battery level.
Installing ipMonitor is a breeze, but learn from gung-ho Guy's mistake and
install SNMP on each computer that you wish to monitor. What sealed my
unreserved recommendation of SolarWinds is their support team, you will get
expert help even when you are evaluating the ipMonitor.
Download SolarWinds ipMonitor (21 days eval)
Combine the business of troubleshooting with the pleasure of learning. Acctinfo gives extra information about the last time a user logged on, also Bad Password count and the
UserAccountControl value. Download and install acctinfo.dll and thus get the Additional Account info tab to see what your users have been doing.
See Also
● ADSI Edit
● ADSI More Examples ●
ADModify
● LDP ●
Replmon
●
Performance Monitor Tool
|
