Following on from my last post I thought it might also be interesting to post a slightly modified version of the Powershell User Account Query script.  This version is designed to be run locally on your Windows Desktops and should return a list of all the local user accounts and the Account Disabled or Enabled Status.

Get-WmiObject Win32_UserAccount -filter “LocalAccount=True” | Select-Object Name,Disabled

Below is a version of the script that also queries the account Lockout status

Get-WmiObject Win32_UserAccount -filter “LocalAccount=True” | Select-Object Name,Disabled,Lockout

These scripts can be used in conjunction with your workstation monitoring software, such as GFI Max Remote Management.