What Acctinfo.dll does for you is expose more properties
in ADUC (Active Directory Users and Computers), for example lastLogon and Password Expires. Specifically, with this add-on you get an extra tab in ADUC called Additional Account Info.
What led me to
discover this treasure called acctinfo.dll was research into an LDAP property called lastLogon. The reason that I have not used acctinfo.dll previously is that whenever I need to investigate such hidden Active Directory attributes, I launch ADSI Edit.
Our mission is to add an extra tab to ADUC (Active Directory Users and Computers). Amongst the extra information on this tab is, the lastLogon time, UserAccountControl value and Bad
Password Count.
All we need to display this extra information is to obtain a dynamic link-library file called acctinfo.dll, copy it to the correct folder and then register the service. Here are detailed instructions to
achieve our mission:
User Account Control, for example a value of 512 means enabled or 514 disabled. Also a value of 66048 (see diagram) means that the account cannot be locked out.
Whether the account has been locked out - or not. (Locked: No)
SID and GUID
Last Logon, Logoff times
Logon Count, Bad Password Count
Guy Recommends 3 Free Active Directory Tools
Solarwinds have produced three Active Directory add-ons. These free utilities
have been approved by Microsoft, and will help to manage your domain by:
You can remove Acctinfo.dll by calling for Regedit. Using the command-line, or
PowerShell, run this instruction:
regsvr32 /u %systemroot%\system32\acctinfo.dll
More Tools Like AcctInfo.dll.
Helps isolate and troubleshoot account lockouts and to change a user's
password on a domain controller in that user's site. It works by adding new
property pages to user objects in the Active Directory Users and Computers
Microsoft Management Console (MMC).
ALockout.dll. Used on the client computer, the
idea is to discover more about a process that is sending wrong credentials.
Problem with Exchange: ALockout.dll can thwart the Exchange store from
starting.
LockoutStatus.exe. Display all your Domain
Controllers that are involved in locking-out a user. LockoutStatus.exe
uses the NLParse.exe tool to parse Netlogon logs for specific Netlogon
return status codes. It creates a csv file to assist with troubleshooting.
NLParse.exe. Can extract entries from the Netlogon
log files.
Guy
Recommends: Permissions Analyzer - Free Active Directory Tool
I like the
Permissions Monitor because it enables me to see quickly WHO has permissions
to do WHAT. When you launch this tool it analyzes a users effective NTFS
permissions for a specific file or folder, takes into account network share
access, then displays the results in a nifty desktop dashboard!
Think of all the frustration that this free utility saves when you are
troubleshooting authorization problems for users access to a resource.
Acctinfo not only gives extra information about the last time a user logged on,
but also 'Bad Password count' and the
'UserAccountControl value'. Download and install acctinfo.dll and thus
get the extra tab to see what your users have been doing.
If you like this page then please share it with your friends
Guy Recommends: Orion's NPM - Network Performance Monitor
Orion's performance monitor is designed for detecting network outages. NPM makes it easy to see what's working, and what needs your attention.
This utility guides you through creating network maps. It also helps troubleshooting by indicating whether the root cause is faulty equipment, or resource overload.
