IT professionals providing support to Active Directory users need a quick way to determine whether a given user account is locked out or the password has expired. Use the NET USER jsmith /DOMAIN command to review the Status of a Windows Domain User Account (substitute a real username for “jsmith”). Important output fields to look for:
- Account active (lockout status)
- Account expires (account will not be valid after expiration)
- Password expires (password must be changed after expiration)
There are other ways to get this information, but this can be one of the easiest tools to use. This tool still comes pre-installed in recent versions of Windows including Server 2012.