Get Lockedout events from the security eventlog from the PDC
Script to Get Lockedout events from the security eventlog from the PDC
1 2 |
$DomainController = Get-ADDomainController -Service PrimaryDC -Discover Get-WinEvent -ComputerName $DomainController -FilterHashtable @{logname='security';ID=4740} |