Use Acctinfo.dll to learn more about AD user account information

Description

Acctinfo.dll is a dynamic link library file that, after registering the dynamic link library file, allows an administrator to add a "Additional account Info" When viewing user properties by using the "Active Directory Users and Computers" management Console tab. This tab allows administrators to view advanced information in Active Directory, such as when a user last modified a password, when the user's account was last logged on, and so on. Use the Additional Account Info tab to view information, primarily for the following two requirements.

• In some cases, some of the information is not explicitly stored in Active Directory, but is calculated when needed. For example, the specific date on which a user account password expires is not present in Active Directory, but in Active Directory, the date and password for which the user recently changed the password are stored for a maximum age. In order to be able to determine the specific expiration date of a user account password, it is often possible to use a script to obtain the information and then calculate the final result. Acctinfo.dll can automatically calculate the data and display the results directly.
• In some cases, some of the information is not stored in Active Directory, but is stored locally. For example, the last logon time of a user account and the last logoff time are only stored locally on each domain controller and are not replicated to other domain controllers in the domain. Acctinfo.dll can help administrators check when a user last logged on and off on a domain controller. If you have more than one domain controller in the domain, the administrator may need to install Acctinfo.dll on each domain controller to check the logon and logoff times of one user account on each domain controller.

In addition, using Acctinfo.dll can also make it easier to modify user account passwords to lock or unlock user accounts.

System Requirements

Windows Server 2003 or Windows Server operating systems
Installation Acctinfo.dll must have Administrator privileges

File requirements

Acctinfo.dll

Installing Acctinfo.dll

Before you can use Acctinfo.dll, you need to install a registered Acctinfo.dll file.

1. Copy the Acctinfo.dll file to the "%windir%\system32" folder. In Windows Server 2003, this folder is typically "C:\Windows\System32"; In Windows 2000, this folder is typically "C:\Winnt\System32".

2. Open a command-line window, assuming the "%windir%\system32" folder is "C:\Windows\System32", type the following:
regsvr32 c:\windows\system32\acctinfo.dll

If the command executes successfully, a dialog box will appear that successfully registers the Acctinfo.dll.

Uninstalling Acctinfo.dll

You can uninstall Acctinfo.dll at any time.

Open a command-line window, assuming that the current system's "Windir%\system32" folder is "C:\Windows\System32", type the following:
Regsvr32/u C:\windows\system32\acctinfo.dll

If the command executes successfully, the Acctinfo.dll will be successfully uninstalled.

Instructions for use

After the registration Acctinfo.dll is installed, start the Active Directory Users and Computers management console, double-click to view the properties of a user account, and select the Additional Accounts Info tab. The specific meanings are described in the following table

Property	Describe
Password last Set	Displays the user account password last set time.
Domain Password Policies	Click this button to view the password policy in the domain.
Password Expires	Displays the specific date on which the user account password expires. If the user password is never expired, you can click the "Decode" button to display "UF_DONT_EXPIRE_PASSWD" in the dialog box that appears, stating that the user password never expires.
User Account Control	Displays the values stored in the "userAccountControl" attribute in Active Directory, where the data includes whether the user's password has a duration, whether the user needs to use smart card logon and whether the user is trusted for delegation, and so on. The number is the sum of all the tokens that are allowed in "userAccountControl". Click the Decode button to view the specific property configuration. For example, "ads_uf_password_expired" indicates that the password for the current user account has expired.
Locked out	Shows whether the user account is locked.
Last-logon-timestamp	Displays the specific date and time that the current user has recently logged on to this domain control. If you install on a member server by using Active Directory users and Computers and Acctinfo.dll view, the information that is displayed is information that is logged on to the domain controller that is used by this member server. To determine which domain controller to log on to, you can see my other blog. View
Sid and Sid History	Displays the SID of the user account. If a user account is migrated from another domain or forest, the SID history button will work. Click this button to view the previous SID of the user account.
Guid	Displays the globally Unique Identifier (GUID) of the user account.
Last Logon	Displays the last logon date and time of the user. This refers to the date and time that was recently verified by this domain controller.
Last Logoff	Displays the time that the user last logged off from this domain controller.
Last Bad Logon time	Displays the date and time that the user last failed to log on from this domain controller.
Logon Count	Displays the number of times a user has successfully logged on from this domain controller.
Bad Password Count	Displays the number of times a user has failed to log on from this domain controller.

Modify user account Properties

Although Acctinfo.dll is primarily used to display information. But he can also modify some of the properties of the user account.

On the Additional Account Info tab, click the Set PW on Site DC button. In the New dialog box that appears, modify the password for the user account. This method of password modification is performed faster by connecting directly to the domain controller on the site where the user is located. In this dialog box, you can also unlock the user account.

Attention

Acctinfo.dll must install registration on all computers that use the Active directory Users and Computers management console to view user account information. For example, suppose an administrator typically views user account information on two servers, server A and server B, respectively. If you installed Acctinfo.dll on Server A, the "Additional Account Info" tab will appear in Active Directory users and computers. However, on Server B, this tab will not be in Active Directory users and computers unless you also have registered Acctinfo.dll installed on Server B.

Windows Server 2003 Resource Kit Tools

The Microsoft®windows®server 2003 Resource Kit Tools is a set of Tools to help administrators streamline management Tas KS such as troubleshooting operating system issues, managing Active Directory®, configuring Networking and security Featur ES, and Automating application deployment.

Quick Info File Name: Rktools.exe Download Size: 12049 KB Date Published: 4/28/2003 Version: 2003 Download

Overview

The Microsoft®windows®server 2003 Resource Kit Tools is a set of Tools to help administrators streamline management Tas KS such as troubleshooting operating system issues, managing Active Directory®, configuring Networking and security Featur ES, and Automating application deployment.

The following tools are provided:

• Acctinfo.dll (documented in Readme.htm)
• Adlb.exe:Active Directory Load Balancing Tool
• Admx.msi:ADM File Parser
• Atmarp.exe:Windows ATM ARP Server Information Tool
• Atmlane.exe:Windows ATM LAN Emulation Client Information
• Autoexnt.exe:AutoExNT Service
• Cdburn.exe:ISO CD-ROM burner Tool
• Checkrepl.vbs:Check Replication
• Chklnks.exe:Link Check Wizard
• Chknic.exe:Network Interface Card Compliance Tool for Network Load balancing
• Cleanspl.exe:Spooler Cleaner
• Clearmem.exe:Clear Memory
• Clusdiag.msi:Cluster Diagnostics and Verification Tool
• Clusfileport.dll:Cluster Print File Port
• Clusterrecovery.exe:Server Cluster Recovery Utility
• Cmdhere.inf:Command here
• Cmgetcer.dll:Connection Manager Certificate Deployment Tool
• Compress.exe:Compress Files
• Confdisk.exe:Disk Configuration Tool
• Consume.exe:Memory Consumers Tool
• Creatfil.exe:Create File
• Csccmd.exe:client-side Caching command-line Options
• Custreasonedit.exe:Custom Reason Editor (documented in Readme.htm)
• Delprof.exe:User Profile Deletion Utility
• Dh.exe:Display Heap
• Diskraid.exe:RAID Configuration Tool
• Diskuse.exe:User Disk Usage Tool
• Dnsdiag.exe:SMTP DNS Diagnostic Tool (documented in Readme.htm)
• Dumpfsmos.cmd:Dump FSMO Roles
• Dvdburn.exe:ISO DVD Burner Tool
• Empty.exe:Free working Set Tool
• Eventcombmt.exe:Check Replication
• Fcopy.exe:File Copy Utility for Message Queuing
• Frsflags.vbs
• Getcm.exe:Connection Manager Profile Update
• Gpmonitor.exe:Group Policy Monitor
• Gpotool.exe:Group Policy Objects
• Hlscan.exe:Hard Link Display Tool
• Ifilttst.exe:IFilter Test Suite
• Ifmember.exe:User Membership Tool
• Inetesc.adm:Internet Explorer Enhanced Security Configuration
• Iniman.exe:Initialization Files Manipulation Tool
• Instcm.exe:Install Connection Manager Profile
• Instsrv.exe:Service Installer
• Intfiltr.exe:Interrupt Affinity Tool
• Kerbtray.exe:Kerberos Tray
• Kernrate.exe:Kernel Profiling Tool
• Klist.exe:Kerberos List
• Krt.exe:Certification Authority Key Recovery
• Lbridge.cmd:l-bridge
• Linkd.exe
• Linkspeed.exe:Link speed
• List.exe:List Text File Tool
• Lockoutstatus.exe:Account lockout Status (documented in Readme.htm)
• Logtime.exe
• Lsreport.exe:Terminal Services Licensing Reporter
• Lsview.exe:Terminal Services License Server Viewer
• Mcast.exe:Multicast Packet Tool
• Memmonitor.exe:Memory Monitor
• Memtriage.exe:Resource Leak Triage Tool
• Mibcc.exe:SNMP MIB Compiler
• Moveuser.exe:Move Users
• Mscep.dll:Certificate Services Add-on for simple Certificate enrollment Protocol
• Nlsinfo.exe:Locale Information Tool
• Now.exe:STDOUT Current Date and time
• Ntimer.exe:Windows program Timer
• Ntrights.exe
• Oh.exe:Open Handles
• Oleview.exe:ole/com Object Viewer
• Pathman.exe:Path Manager
• Permcopy.exe:Share Permissions Copy
• Perms.exe:User File Permissions Tool
• Pfmon.exe:Page Fault Monitor
• Pkiview.msc:PKI Health Tool
• Pmon.exe:Process Resource Monitor
• Printdriverinfo.exe:Drivers Source
• Prnadmin.dll:Printer Administration Objects
• Qgrep.exe
• Qtcp.exe:QoS Time Stamp
• Queryad.vbs:Query Active Directory
• Rassrvmon.exe:RAS Server Monitor
• Rcontrolad.exe:Active Directory Remote Control Add-on
• Regini.exe:Registry Change by Script
• Regview.exe (documented in Readme.htm)
• Remapkey.exe:Remap Windows Keyboard Layout
• Robocopy.exe:Robust File Copy Utility
• Rpccfg.exe:RPC Configuration Tool
• Rpcdump.exe
• Rpcping.exe
• RPING:RPC Connectivity Verification Tool
• Rqc.exe:Remote Access Quarantine Client
• Rqs.exe:Remote Access Quarantine Agent
• Setprinter.exe:Spooler Configuration Tool
• Showacls.exe
• Showperf.exe:Performance Data Block Dump Utility
• Showpriv.exe:Show Privilege
• Sleep.exe:Batch File Wait
• Sonar.exe:FRS Status Viewer
• Splinfo.exe:Print Spooler Information
• Srvany.exe:Applications as Services Utility
• Srvcheck.exe:Server Share Check
• Srvinfo.exe:Remote Server Information
• Srvmgr.exe:Server Manager
• Ssdformat.exe:System State Data Formatter
• Subinacl.exe
• Tail.exe
• Tcmon.exe:Traffic Control Monitor
• Timeit.exe (documented in Readme.htm)
• Timezone.exe:Daylight Saving Time Update Utility
• Tsctst.exe:Terminal Server Client License Dump Tool
• Tsscalling.exe:Terminal Services Scalability Planning Tools
• Uddicatschemeeditor.exe:UDDI Services Categorization Scheme Editor
• Uddiconfig.exe:UDDI Services command-line Configuration Utility
• Uddidataexport.exe:UDDI Data Export Wizard
• Usrmgr.exe:User Manager for Domains
• Vadump.exe:Virtual Address Dump
• Vfi.exe:Visual File Information
• Volperf.exe:Shadow Copy Performance Counters
• Volrest.exe:Shadow Copies for Shared Folders Restore Tool
• Vrfydsk.exe:Verify Disk
• Winexit.scr:Windows Exit Screen Saver
• Winhttpcertcfg.exe:WinHTTP Certificate Configuration Tool
• Winhttptracecfg.exe:WinHTTP tracing Facility Configuration Tool
• Winpolicies.exe:Policy Spy
• Wins.dll:WINS Replication Network Monitor Parser
• Wlbs_hb.dll & Wlbs_rc.dll:Windows Load balancing Server Network Monitor Parse

Use Acctinfo.dll to learn more about AD user account information