Active Directory Administration Cookbook

Using command-line tools

Use the following command to find locked-out user accounts in Active Directory:

dsmod.exe "CN=User,CN=Users,DC=lucernpub,DC=com" -disabled no

Use the following command to disable a user object in Active Directory:

dsmod.exe user "CN=User,CN=Users,DC=lucernpub,DC=com" -disabled yes