Tuesday, July 11, 2017

Account Lockout Tracking


Logon to domain controller.

1. Open CMD (not power shell)
2. CD Windows\debug
3. Start debug
4. nltest /dbflag:2080ffff

5. find /i "user-name" c:\windows\debug\netlogon.* >user-name.txt