Checking if a user account is locked on another domain controller

I'm trying to see if a user account has been locked out, using the command line.

I thought that I could do this with the net command, but when I run the command

NET USER username /domain

it processes the request on my domain controller; whereas the user that I want to check is on a different domain. I cannot find a command/option to use the right domain (controller).

How do I check a user account on different domain to see whether it has been locked out?

2 Answers

If you have access to another account on the domain you want to query against, run the command as that account. Here are some ways to do this:

1. Use remote desktop to get to a computer in the domain
2. Use the Windows runas command-line command in front of your net user command
3. Shift + right-click Command Prompt and select Run as different user

If your not required to use command prompt can run a report on all domain controllers and allow you to unlock each via GUI.