title: Powershell script to report account lockout policy settings?
body: <p>I have a few computers outside the network, not allowed to have the PS AD module installed.</p>
  
  <p>All I want to do is <em>use Powershell to report some of the account lockout settings</em>, specifically the lockout threshold, lockout duration, and whether this machine is locked out or not.</p>
  
  <p>All I have found during my searches is info using the Active directory PS module. Also, other references dealing with remoteAccess. <strong>Neither of which fit my need.</strong> </p>
  
  <p>I have also looked for <strong>registry keys</strong> related to the 'local' lockout settings but have not found anything (E.g. only refs to remoteaccess maxDenial; not the local setting).</p>
  
  <p>Other than firing up <em>gpedit</em> and viewing the local policy, I was hoping there would be a way to use Powershell to simply report the current local settings.</p>
  
  <p>Anyway help/pointers/knowledge would be greatly appreciated.</p>