Quickly Unlock AD User Accounts with PowerShell

In this tutorial, I’ll show you how to quickly unlock AD User accounts with PowerShell.

I’ve included examples to unlock a single Active Directory user and how to unlock multiple user accounts. As an alternative to PowerShell, I’ll also show you a GUI tool to quickly unlock user accounts.

These PowerShell commands require the Active Directory module to be installed. It’s best that you install the RSAT tools on your computer. This will prevent the need to load the module every time you run Active Directory related PowerShell commands. You also need to update PowerShell to the latest version to ensure all the cmdlets are updated. Server 2012 has PowerShell 4 installed by default so make sure you update to version 5.1 or the new PowerShell core 7.

Let’s jump right into some examples!

Example 1. Unlock AD Account with PowerShell

In this first example, I’ll use PowerShell to unlock a single user using the account SamAccountName (aka logon name).

Step 1. Run the Unlock-ADAccount cmdlet

Unlock-ADAccount -Identity robert.allen

The above command will unlock the user “robert.allen”. Replace robert.allen with your user’s logon name.

Step 2. Verify Lockout Status

Get-ADUser robert.allen -Properties * | Select-Object LockedOut

The above command will check if the account is locked out.

That is all for example 1.

That was easy, right?

Related: How to Get AD Users Password Expiration Date

Example 2. Unlock AD Account with Confirmation

This command is the same as the previous example but it adds a confirmation for each account to unlock.

Unlock-AdAccount -identity alice.mills -Confirm

This will pop up a message to confirm the action.

Tip: If you have repeated accounts locked out you should investigate why before unlocking them all. You can check out this how to guide for troubleshooting account lockouts and tracking down the source of lockout events.

Example 3. Unlock All AD User Accounts with PowerShell

I don’t recommend this but you can find all locked users and unlock them with the command below. If a large number of accounts are locked out that should raise some concerns. You should investigate and look at the logs to ensure nothing suspicious is going on in your network.

Search-ADAccount -Lockedout | select-object Name, SamAccountName

In this example, I have locked three accounts, I’ll use the Search-ADAccount command to list all the locked accounts.

To unlock all the accounts at once I just add | Unlock-AddAccount to the end of the search command, example screenshot below.

I’ll run Search-AdAccount -lockout again to confirm all the accounts were unlocked.

You can see above that no accounts are listed.

Again I would be cautious about unlocking all the user accounts at once. Accounts are locked out for a reason (multiple bad password attempts) so unless you know exactly what’s going on be careful with this one.

You can also add the -confirm to this example to confirm each unlock.

Try these commands out and let me know how they work by leaving a comment below.

Example 4. Unlock AD Account with the AD Pro Toolkit

If you want an alternative to PowerShell then check out the User Unlock tool from the AD Pro Toolkit. With this tool, you can also reset passwords and find the source computer or the lockout.

Step 1: Open the Password Reset & Unlock Tool

Click here to download a free trial.

From the list of tools click on Password Reset.

Step 2: Click Check for Locked Users

When you click “Check for Locked Users” It will display the username, LockoutTime, Password last Set, UserPrincipalName, and DN.

Step 3: Right Click to Unlock

Right-click on any locked account and select unlock.

You will get a pop up letting you know the accounts of been unlocked.

You can also reset passwords and use the troubleshot lockouts option to find the source of account lockouts.

The AD Pro Toolkit includes hundreds of Active Directory reports for users, computers, groups, and more. It also includes several tools to simplify user account management.

Click here to download a free trial of the AD Pro Toolkit.