Troubleshooting AD lockouts with Event viewer

Troubleshooting AD lockouts

You can easily see when a user has been locked out of AD using Event Viewer.

To do so open Event Viewer and expand Security, Filter the log for Event ID 4740.

Displayed will be all the locked out users with the time, username and device that the lockout has come from.

Found priceless insights in this blog? Support the author’s creativity – buy them a coffee!

Leave a Reply

Your email address will not be published. Required fields are marked *