This can be helpful in situations where you’re trying to obtain a list of all domain user accounts whose password might be about to expire, perhaps to inform them, or to take some other administrative action, or to troubleshoot frequent account lockout issues.
The tool is rather easy to use, and the following is its usage -
aloinfo /expires /server:<Domain_Controller_Name>
Interestingly, one other use of this tool is that it can be used to obtain a list of all local services and startup account information for a user who is currently logged on.
On a related note, if you're looking for a tool that can provide a wealth of information related to passwords, last-logon time-stamps, account expirations, staleness, failed password logons, account creation, change and deletion dates, etc., then its worth looking at this Active Directory reporting tool.
+Pros: Free, Can be pointed at a specific Domain Controller, Can help identify accounts whose password might be about to expire
-Cons: Provides console output, Can’t generate presentable reports, No CSV output
Download Point: You can download AloInfo.exe from here.
Summary: Aloinfo is a helpful tool that is designed for a specific purpose. As a reporting tool, it fulfills its intended design goals well, but account lockout and related information can also be obtained with the help of scripts or other free tools such as adfind.
No comments:
Post a Comment