PowerShell - Find Lockout Sources

Use these lines as a saved .ps1 and prompts for username to check, if the account IS locked, it will drill the PDC and report to screen the lockout sources, if the account had unlocked, It will display red, is a great script, just the account has to be locked

---

$Usr = Read-Host "Enter Username to Search Lockout Source"

$Pdc = (Get-AdDomain).PDCEmulator

$ParamsEvn = @{

‘Computername’ = $Pdc

‘LogName’ = ‘Security’

‘FilterXPath’ = "*[System[EventID=4740] and EventData[Data[@Name='TargetUserName']='$Usr']]"

}

$Evnts = Get-WinEvent @ParamsEvn

$Evnts | foreach {$_.Properties[1].value + ' ' + $_.TimeCreated}

---