net accounts

Examples

• net accounts /domainDomain lockout thresholdsCopy
• net user taro /domainA user's lock state, last password change and expiryCopy
• Get-ADDefaultDomainPasswordPolicyThe same information in PowerShellCopy
• Get-ADUserResultantPasswordPolicy taroCheck whether a fine-grained password policy appliesCopy

Syntax

net accounts [/domain]

Key points

• A lockout threshold of Never means lockout is disabled.
• An account locks when failures reach the threshold within the lockout observation window.
• /domain shows the default domain policy. Users under a fine-grained policy may have different values.

When it does not work

• Repeated lockouts usually come from a device still using an old password: saved credentials, phone mail clients or mapped drives.