Introduction to Additional Account Info - Acctinfo.dll
What Acctinfo.dll does for you is expose more properties
in ADUC (Active Directory Users and Computers), for example lastLogon and Password Expires. Specifically, with this add-on you get an extra tab in ADUC called Additional Account Info. What led me to
discover this treasure called acctinfo.dll was research into an LDAP property called lastLogon. The reason that I have not used acctinfo.dll previously is that whenever I need to investigate such hidden Active Directory attributes, I launch ADSI Edit.
Topics for Additional Account Info (c.dll)
‡
Our mission is to add an extra tab to ADUC (Active Directory Users and Computers). Amongst the extra information on this tab is, the lastLogon time, UserAccountControl value and Bad
Password Count.
All we need to display this extra information is to obtain a dynamic link-library file called acctinfo.dll, copy it to the correct folder and then register the service. Here are detailed instructions to
achieve our mission: Download
acctinfo.dll or acctinfo in zip format Copy acctinfo.dll to the %systemroot%\system32 folder Register the service and dll with this command:
regsvr32 acctinfo (Similar to registering the schema snap-in) Close, then open Active Directory Users and Computers. Look for an extra tab called Additional Account Info.
Note 1: My information is that you need to install acctinfo on the machine where you execute the
ADUC snap-in. Note 2: In line with
modern best practice, once you have registered acctinfo, there is no need to reboot your server. Note 3: If you wish to remove the Additional Account Info tab, open a Run dialog box and then type:
regsvr32 /u acctinfo Note 4: Acctinfo is supplied free by Microsoft.
- Password Last Set and Password Expires
- User Account Control, for example a value of 512 means enabled or 514 disabled. Also a value of 66048 (see diagram) means that the account cannot be locked out.
- Whether the account has been locked out - or not. (Locked: No)
- SID and GUID
- Last Logon, Logoff times
- Logon Count, Bad Password Count
 Guy
recommends: The SolarWinds ipMonitor
I am attracted to
ipMonitor
because it inhabits that zone of part work, part play; Guy just could not put
the dashboard away. This excellent performance monitor will get you
started in the quest to remove bottlenecks on your network. SolarWinds
provides this fully-functioning product free for 21 days. So download and
install ipMonitor, then start scrutinizing your computers CPU, memory and disk
performance.
Installing ipMonitor is a breeze, but learn from gung-ho Guy's mistake, and
install SNMP on each computer that you wish to monitor. What sealed my
unreserved recommendation of SolarWinds is their support team, you will get
expert help even when you are evaluating the ipMonitor.
Download SolarWinds ipMonitor (21 days eval)
Combine the business of troubleshooting with the pleasure of learning. Acctinfo gives extra information about the last time a user logged on, also Bad Password count and the
UserAccountControl value. Download and install acctinfo.dll and thus get the Additional Account info tab to see what your users have been doing.
See Also
● ADSI Edit
● ADSI More Examples ●
ADModify
● LDP ●
Replmon
●
Performance Monitor Tool
|
