In this article:
Objective
Prerequisites
Steps to follow
Validation and confirmation
Tips
Related topics and articles
Objective
This article explains how to create a summary-based custom report to view the total number of lockouts per user and clarifies the limitations of this report.
Prerequisites
You must have access to the ADAudit Plus web console with permissions to create and manage custom reports.
Your domain controllers must be configured in ADAudit Plus, and logon event data must be collecting successfully.
Steps to follow
Navigate to the Analytics tab > Report Configuration (on the left pane) > Custom Reports, and click Create Custom Report.
Provide a suitable report name and description.
Set the Report Type to Summary View.
Under Report Category, select AD Objects, expand User Management, and choose the Locked Out Users sub-module.
Click Next.
On the next screen, under Summarize information by, select the Username column.
For the Summary column, select Count, and then click Save.
Validation and confirmation
After saving, the report will display the total count of lockouts for each user.
You can use the Custom Range or Period option to filter the data for a specific time window, such as the last 24 hours.
Tips
It is not currently possible to group the user lockout report by parts of a date, such as by the hour. The product's reporting feature groups by the exact timestamp down to the second, not by aggregated time intervals.
This functionality has been submitted to the product team as a feature request for future evaluation.
Related topics and articles
How to create an alert for administrative account lockouts