COMMAND EVERYTHING.
Find locked user accounts for an authorized account-support investigation.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns user accounts marked locked out. Reviewing an account does not unlock it, and results depend on the contacted domain controller.
Search-ADAccount [-AccountDisabled] [-AuthType <ADAuthType>] [-ComputersOnly] [-Credential <PSCredential>]
[-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>] [-SearchScope <ADSearchScope>]
[-Server <String>] [-UsersOnly] [<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
-LockedOut (required)-UsersOnlyWindows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Search-ADAccount -LockedOut -UsersOnlyReturns user accounts marked locked out. Reviewing an account does not unlock it, and results depend on the contacted domain controller.
Sign in to keep your own command reference lists.
Explain or customize this command with AI