![]() NLParse.exe - Used to extract and display desired entries from the Netlogon log files. This tool directs the output to a comma-separated value (.csv) file that you can sort later. I ma also looking for a solution on 2012. This answer is obsolete and no longer works on Windows 2008 or newer. Are there any similar tools for Server 2012 R2 Chris Powell. This is extremely useful when troubleshooting because we can go directly to the domain controller, filter for EventID 4740 and it will be able to give us some indication as to whats locking out the account. Maintaining and Monitoring Account Lockout Account Lockout Tools (description of the tools in the download linked to above). LockoutStatus.exe uses the NLParse.exe tool to parse Netlogon logs for specific Netlogon return status codes. In Windows Server 2008, 2012 (R2) and 2016 every account lockout gets recorded with the EventID 4740. LockoutStatus.exe - To help collect the relevant logs, determines all the domain controllers that are involved in a lockout of a user account. Also, you should not use ALockout.dll on servers that are running Microsoft Exchange Server because it may prevent the Exchange store from starting.ĪLoInfo.exe - Displays the names and age of passwords for all user accounts.ĮnableKerbLog.vbs - Used as a startup script by enabling Kerberos protocol to log on to all clients that run Windows 2000 and later versions of Windows.ĮventCombMT.exe - Collects specific events from event logs of several different computers in one central location. Do not use this tool on servers that host network applications or services.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |