User Account Lock Out Event Alert & Recovery

[socca1324]

I am working on monitoring account lockouts utilizing eventlog[Security,,,,4740,,] on my primary Domain Controller with trigger logseverity(/<primary domain controller>/eventlog[Security,,,,4740,,])>0 This is working as expected. The part that has me stumped is the recovery expression. I am...

[tof233]

Hello,
I couldn't find any template for monitoring Microsoft Active Directory / Domain Controller infrastructure.
I'm quite surprised as it should be something really useful.

Does someone made one?
Otherwise I will try to create it and publish