Ever have those users who never log-off of their workstation?
The LockOutStatus program comes in very handy when trying to diagnose why all of a sudden a user can't print to a network printer nor browse a networked file share.
This exe needs to be placed in a shared tools file share on a server.
Once run, it will query all Domain Controllers and let you see when the password was last set, if the account is locked out, etc.
Create a Custom Action:
\\{ServerName}\{FileShare}\lockoutstatus.exe /u:{domain}\{username}