Lock out fixer is a free tool that helps administrators to troubleshoot the locking out of domain accounts. It works like the Microsoft tool Lockoutstatus.exe but in addition to just checking lock out time for all the domain controllers, it allows you to instantly view the audit failure logs written exactly at the time of the account lock out or bad password time... The event log shows the client i.p address using which we can easily identify the issues.

This is how it works:
1. You check the servers you want to query from the list of detected domain controllers, type in a username... Then you can either unlock the account or you can check for the lockout status...

2. If you check the lock out status, it displays the lock out time, Last bad password time and bad password count for each of the domain controllers you selected... The time displayed is in the time zone of remote computer...You can again check the items you need and query for the audit failure logs that occured at the lock out time on the selected servers... If the account is not locked, then it will query for the logs occured at bad password time..

3. There is also a seperate event log query tool, which allows you to enter any computer name and check for all the logs.. Again, time should be entered based on the time zone of the remote computer.

A few things to note:
1. If an account got unlocked automatically after a certain period (as per the policy), but if the user hasn't logged in yet, the tool wil still report that the account is locked out... That is because, the tool determines if the account is locked out by checking if there is any value for the attribute, "lockouttime"..

When you click 'unlock account' in this case, it will simply clear the value present in 'lockouttime'.. (Otherwise, it will get cleared when the user logs in)

2. Sometimes, you may not see any logs for a bad password time... This is because,sometimes the event log is written one second prior to the lockout time/bad password time shown...You can use the event log query to check if any logs have occured one second before.. For example, if a bad password occured at 6:30:54pm and you don't see any relevant logs, you can query for logs occured at 6:30:55 pm..

The license of this software is Freeware, you can free download and free use this server utility software.