RE: [NTSysADM] badPwdCount clarification

2016-05-17 Thread Christopher Bodnar
[mailto:listsad...@lists.myitforum.com] On Behalf Of Charles F Sullivan Sent: Tuesday, May 17, 2016 11:12 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] badPwdCount clarification See if you can find and download lockoutstatus.exe, which is an old Resource Kit utility. It runs even on Windows

RE: [NTSysADM] badPwdCount clarification

2016-05-17 Thread Charles F Sullivan
...@lists.myitforum.com [mailto: listsad...@lists.myitforum.com] *On Behalf Of *Christopher Bodnar *Sent:* Tuesday, May 17, 2016 10:21 AM *To:* ntsysadm@lists.myitforum.com *Subject:* RE: [NTSysADM] badPwdCount clarification Hey Michael, this is great, thank you. One thing I still don’t get. According to this

RE: [NTSysADM] badPwdCount clarification

2016-05-17 Thread Christopher Bodnar
ckout? Does it reset the badPwdCount on all DC’s? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Micheal Espinola Jr Sent: Monday, May 16, 2016 4:54 PM To: ntsysadm@lists.myitforum.com Subject: Re: [NTSysADM] badPwdCount clarification I believe this

Re: [NTSysADM] badPwdCount clarification

2016-05-16 Thread Andrew S. Baker
Thanks, Micheal. That's an awesome article. Regards, ASB http://XeeMe.com/AndrewBaker Providing Expert Technology Consulting Services for the SMB market… GPG: 1AF3 EEC3 7C3C E88E B0EF 4319 8F28 A483 A182 EF3A Sent with Mixmax On Mon, May 16, 2016 4:54 PM, Micheal Espinola Jr mi

Re: [NTSysADM] badPwdCount clarification

2016-05-16 Thread Micheal Espinola Jr
I believe this wiki article breaks it down granularly enough to answer your questions: http://social.technet.microsoft.com/wiki/contents/articles/32490.active-directory-bad-passwords-and-account-lockout.aspx -- Espi On Mon, May 16, 2016 at 12:04 PM, Christopher Bodnar < christopher_bod...@glic.

[NTSysADM] badPwdCount clarification

2016-05-16 Thread Christopher Bodnar
Can someone clarify this for me, a little confused on this. Let's say I have 4 domain controllers (all 2008 R2) in a single site (PDCE1, DC2, DC3, DC4). And let's say account lockout is set to 5, and there are no RODCs in the environment. Here are the various badPwdCount values on the domain co