Objective  

This article explains how to create a summary-based custom report to view the total number of lockouts per user and clarifies the limitations of this report.

Prerequisites  

• You must have access to the ADAudit Plus web console with permissions to create and manage custom reports.

• Your domain controllers must be configured in ADAudit Plus, and logon event data must be collecting successfully.

Steps to follow  

1. Navigate to the Analytics tab > Report Configuration (on the left pane) > Custom Reports, and click Create Custom Report.
   
2. Provide a suitable report name and description.

3. Set the Report Type to Summary View.

4. Under Report Category, select AD Objects, expand User Management, and choose the Locked Out Users sub-module.

5. Click Next.

6. On the next screen, under Summarize information by, select the Username column.

7. For the Summary column, select Count, and then click Save.
   

Validation and confirmation  

• After saving, the report will display the total count of lockouts for each user.
  
• You can use the Custom Range or Period option to filter the data for a specific time window, such as the last 24 hours.
  

Tips  

• It is not currently possible to group the user lockout report by parts of a date, such as by the hour. The product's reporting feature groups by the exact timestamp down to the second, not by aggregated time intervals.

• This functionality has been submitted to the product team as a feature request for future evaluation.

Related topics and articles  

• How to create an alert for administrative account lockouts