Trap the event "user account locked out"

[ramass]

Hi,

I would like to execute an action each time a user account is locked out in Active Directory. I think that it is possible by trapping an event (perhaps a "userAccountLockedOutEvent&quot but I cannot find the right event.
After browsing the web during hours, two questions remains:
- Which event must I trap ?
- How can I trap It ?


WMI can be used. Follow the URL:

http://msdn.microsoft.com/library/en-us/dnbda/html/monitordotnet.asp?frame=true

and find "Handling WMI events"

Unfortunately, the library

 System.management

is not found by .NET.


Do you have any idea ?

 

[imjbhowe]

If you can't find out how to trap the event you could run an LDAP query every so often to see if any users accounts are locked out. I am not sure about the server load for a larger system but I don't think it would be an issue for a smaller company.

I can send some of the code for running this LDAP query if you want.

 

[ramass]

Thanks for the answer

I have thought about this solution but the company has more than 5000 employees !!... and the event must be trapped 5 minutes maximum after the user account locks out