Pricing  Get Quote
 
 

How to unlock Active Directory domain accounts?

The following is a comparison between unlocking Active Directory domain accounts with Windows PowerShell and ADSelfService Plus:

With PowerShell

  • Unlock Active Directory user one by one
    Executing this code will unlock a single user by their samAccountName.
    Unlock-ADAccount -Identity samAccountName
    
     Copied
  • Unlock all AD users in a domain
    Executing this code will unlock all AD users in the domain.
    Search-ADAccount -Lockedout | Unlock-AdAccount
    
     Copied

Unlock users by OU and group membership.

No support offered.

With ADSelfService Plus

  • For users: Self-service account unlock, i.e., account unlock without admin intervention
    • Go to ADSelfService Plus admin portal.
    • Navigate to Configuration > Self-Service > Policy Configuration.
    • Select Account Unlock.
      how-to-unlock-ad-user-account-using-powershell-1
    • Click Select OUs/Groups to granular select which set of users need to be empowered with self-service account unlock feature.
      how-to-unlock-ad-user-account-using-powershell-2
    • Click Save.
  • For admins: Unlock all users in a domain
    • Go to ADSelfService Plus admin portal.
    • Navigate to Configuration > Self-Service > Policy Configuration > Advanced.
      how-to-unlock-ad-user-account-using-powershell-3
    • Enable Automatically unlocks locked-down accounts in your domain.
    • Click Save.

What are the limitations of Windows PowerShell to unlock accounts?

  • No support for end-users to unlock their locked out accounts on their own from their Windows login screen or their mobile phones.
  • It doesn't allow admins to unlock user accounts based on OU and group memberships.
  • Creating multiple automatic account unlock schedulers for different set of users is a highly laborious process. Also, there's always a possibility of admin privilege exploitation if not maintained properly.

Benefits of ADSelfService Plus

Empower users to unlock their Active Directory and cloud accounts

  Get 30-day free trial.
  • Embark on your script-free AD Self-service password management with ADSelfService Plus.
  •  
  • By clicking 'Start your free trial now', you agree to processing of personal data according to the Privacy Policy.
  • Thank you for downloading!

    Your download should begin automatically in 15 seconds. If not, click here to download manually.

    Thank you for downloading!

    Your download should begin automatically in 15 seconds. If not, click here to download manually.

Related Resources

ADSelfService Plus trusted by

A single pane of glass for complete self service password management
Email Download Link