We now have a hash table with two elements, n and e, that Select-Object recognizes and formats into a display property to the console screen.

The returned value is then added to a string where minutes is appended and stored as the value associated with e. The code in brackets is calculated first. This calculation is performed as part of a subexpression, which is recognized by this notation: ‘$( )’. This is divided by -600000000 to give a positive value in minutes. What’s the expression doing? The LockoutDuration property of the current object $_ is a negative 64-bit time value interval expressed in nanoseconds.

e is the expression that Windows PowerShell evaluates, and that value is….

n is the name of the property to be stored, and its value is lockoutDuration.

denotes the hash table, which contains one or more key-value pairs.

Let’s look at the format of the lockout duration / -600000000) minutes'}} It also displays some custom properties constructed with the aid of two hash tables. Select-Object displays some standard properties: DistinguishedName and LockoutThreshold. Next, produce a customized output representing the policy. $AccountPolicy = Get-ADObject $faultNamingContext -Property lockoutDuration, lockoutObservationWindow, lockoutThreshold Use Get-ADObject to retrieve properties from the domain naming context ( defaultNamingContext): First, connect to the RootDSE of a domain controller: Here’s how to get the Account Lockout Policy settings.

This function reads policy information from a domain header: Get-ADDomainAccountPolicies. In fact, when you update these policies with the Group Policy Management Console, it is the role of the domain’s PDC emulator to write the changes to the header of the domain naming context.

Both are stored as attributes on each domain’s Domain Naming Context. Recently, I was asked how to retrieve a domain’s Account Lockout Policy and Password Policy with Windows PowerShell. Microsoft Scripting Guy, Ed Wilson, is here. Summary: Microsoft guest blogger and PFE, Ian Farr, talks about using Windows PowerShell to get account lockout and password policies.

Account lockout tools server 2012