Windows

'* ListDisabledAccts.vbs
'* Lists locked (disabled) accounts in a domain
'* BlowToad
'* Mostly taken from Microsoft Hey Scripting Guy article.
'* http://www.microsoft.com/technet/scriptcenter/resources/qanda/may05/hey0512.mspx
'* Modified to make it more friendly to my needs
Option Explicit
function OutputSyntax()
On Error Resume Next
Dim strMsg
strMsg = strMsg & vbCrLf _
& "ListDisabledAccts.vbs" & vbCrLf & "Lists accounts that are disabled " & vbCrLf & vbCrLf _
& "Usage: CSCRIPT ListDisabledAccts.vbs " & "[ domain_name]" & vbCrLf & vbCRLF _
& "Where: " & Chr(34) & "domain_name" & Chr(34) _
& " is the name of the domain (or portion of a domain) to scan" & vbCRLF _
& "domain_name example: " & Chr(34) & "ou=accounting,ou=departments,dc=techrepublic,dc=com" & Chr(34) & vbCrLf & vbCrLf
WScript.Echo(strMsg)
WScript.Quit(1)
end function
On Error Resume Next
Dim strDomainName
Select Case WScript.Arguments.Count
Case 0
OutputSyntax()
Case 1
strDomainName = Ucase(Wscript.Arguments(0))
' check for ? in argument
if instr(strDomainName, "?") > 0 then OutputSyntax()
Dim oConnection
Dim oCmd
Dim oRecords
Set oConnection = CreateObject("ADODB.Connection")
Set oCmd = CreateObject("ADODB.Command")
oConnection.Provider = "ADsDSOObject"
oConnection.Open("Active Directory Provider")
Set oCmd.ActiveConnection = oConnection
oCmd.Properties("Page Size") = 1000
oCmd.CommandText = "<LDAP://" & strDomainName &">&(objectCategory=User)(userAccountControl:1.2.840.113556.1.4.803:=2));Name"
Set oRecords = oCmd.Execute
oRecords.MoveFirst
Do Until oRecords.EOF
Wscript.Echo oRecords.Fields("Name").Value
oRecords.MoveNext
Loop
Case Else
OutputSyntax()
End Select

The web page makes it look ugly and there are no comments because TR forces limit of 2000 chars per posting. It SHOULD still work though.

AllGoodNamesTaken is right about this not making for strong security. But sometimes the CEO doesnt care, he just gets upset about his account being locked all the time.

The only half way reasonable situation that I can think of that you might want this is that lots of your accounts get locked overnight due to excessive bad password attempts from the outside. If that is the case, this is not the best solution. You need a firewall and you need to block it at your perimeter. Your users can VPN in if needed.

If the bad attempts are internal, you better find the the bad guy and fill his or her office with fire ants.