Windows Server® 2008 Administrator's Pocket Consultant

Troubleshooting Logon Problems

The previous section listed ways in which accounts can become disabled. Active Directory Users And Computers shows disabled accounts with a red warning icon next to the account name. To enable a disabled account, you right-click the account in Active Directory Users And Computers and then select Enable Account.

You can also search the entire domain for users with disabled accounts by typing dsquery user –disabled at a command prompt. To enable a disabled account from the command line, type dsmod user UserDN –disabled no.

When a user account has been locked out by the Account Lockout policy, the account cannot be used for logging until the lockout duration has elapsed or an administrator resets the account. If the account ...