Unlock Script: Save the following as "Unlock_User.VBS" Const E_ADS_PROPERTY_NOT_FOUND = -2147463155 Set wshArguments = WScript.Arguments Set objUser = GetObject(wshArguments(0)) If IsLockedOut(objUser) Then objUser.Put "lockouttime","0" objUser.SetInfo MsgBox "The user has been unlocked - " & objUser.sAMAccountName Else MsgBox "The user account is not locked - " & objUser.sAMAccountName End If Function IsLockedOut(objUser) on Error resume next Set objLockout = objUser.get("lockouttime") if Err.Number = E_ADS_PROPERTY_NOT_FOUND then IsLockedOut = False Exit Function End If On Error GoTo 0 if objLockout.lowpart = 0 And objLockout.highpart = 0 Then IsLockedOut = False Else IsLockedOut = True End If End Function Remember to save this script to the "NETLOGON" share on your DC so that the script will replicate to all your other Domain Controllers. Running the script locally from DCs in WAN sites will run more smooth than checking back in to the PDC. When you are following the steps outlined in the "Extend Active Directory Functionality" post, use the following command to add this script to your context menu. 4,&Unlock User,\\stevofc.com\netlogon\unlock_user.vbs