We used to have an System Center Orchestrator Runbook that monitored AD for locked accounts and unlocked them, then sent an email notification to an admin account.  Unfortunately the Runbook has disappeared.

Not an Orchestrator guru but from my initial searching it looks like the process should look like this...

Get User -> Unlock User -> Send Email

Each section has been configured but I believe I am missing something.  Does anyone have a link or recommenda

Hi,

if you want to run it in Schedule you just need to start with "Monitor Date/Time":

Monitor Date/Time -> Get User -> Unlock User -> Send Email

Do you need help congiguring the Activities?

Regards,

Stefan

Thank you for the quick response.  Looks like it is failing on the Unlock User piece.  I have the DC configured, but what is the syntax for the Distinguished Name to unlock any account, if this will even work?

Hi,

The script below might be help you.

Get User's Distinguished Name

https://gallery.technet.microsoft.com/scriptcenter/f7b246a4-95a2-4408-b1a1-73b53003883c