Additional Account Info in Active Directory

This old extension in Active Directory Users and Computers (ADUC) MMC snap-in provides additional information called that is helpful in troubleshooting user accounts. 

The required acctinfo.dll reads the following values from the accounts attributes and presents the results under [Additional Account Info] tab within the users properties, including: 

  • Password Last Set (pwdLastSet)
  • Password Expires
  • User Account Control/Locked
  • Last logon (lastLogon)
  • Counters for successful sign ins (logonCount) and failed sign in attempts (badPasswordTime)
  • GUID and SID information, including SID history (objectSid)

Note: At the time of writing, the 'Additional Account Info' tab no longer worked using RSAT for Windows 10. It's known to work with for earlier versions of ADUC MMC snap-ins for Windows XP/Windows Server 2003, Vista/Windows Server 2008, Windows 7/Windows Server 2008 R2 and Windows 8/2012 RSAT versions.
Some of these values can also be read under the [Attribute Editor] tab of a user’s account. Filter attributes that have values by selecting [Filter] > 'Show only attributes that have values'.

To install, download ALTool.exe from Microsoft and extract the files using 7-Zip. With elevated privileges, copy the acctinfo.dll file to %WINDIR%\SysWOW64 directory and then via CMD, register it using the following command:

regsvr32 "%WINDIR%\SysWOW64\acctinfo.dll" /s

Launch ADUC 32 bit mode using the following command:

C:\Windows\System32\dsa.msc -32

When ADUC launches, select the properties of a user account under the [Additional Account Info] tab.