Account Lockout (part 3 of 4)

Last time, I ever use LockoutStatus this utility to track Locked Account status. In the moment, I will use another utility --- eventcombMT.exe to do the same process.

Execute “eventcombMT.exe” by Run as Administrator
So do that will launch EventCombMT GUI
Click Searches –> Built In Searches –> Account LockoutsIt will automatically select the Account Lockouts condition as DC, Log Files, Event Types and Event ID.
Click Options –> Set Output DirectorySelect a folder to locate the report file later.
Due to DC O.S. is Windows Server 2008 R2, not Windows Server 2003, so that we need to change to Event ID of Windows Server 2008 R2 next to click Search button
Based on Status to realize whether this process is successful or fail.
If it is successful, it will generate the related report file.
Of course, we can copy .txt to .csv extension format.
Or select Options –> Save Files As CSV Files before execute Search activity.
So does that we can use Excel to open .csv this file now.


<<<   Account Lockout (part 2 of 4)

Account Lockout (part 4 of 4)   >>>