A simple way to search for locked out accounts that were probably locked out by a bad password in active directory

Get-LockedOutUsers.ps1

#
# Date : 2014-10-31 M. Stevenson - Initial Version
# Desc : Get users that were probably locked out by a 
#        bad password
#

Get-ADUser -Filter { LockoutTime -gt 0 -and BadPwdCount -ge 5 } -Properties * | sort lockouttime -descending | ForEach-Object {
    $lockouttime = [DateTime]::FromFileTimeUtc($_.lockoutTime)
    $bptime = [DateTime]::FromFileTimeUtc($_.badPasswordTime)

    Write-Host "================================================================================="
    Write-Host "$($_.SAMAccountName) ($($_.Name)) locked out on $lockouttime"
    Write-Host "Bad Password Time - $($bptime)"
    Write-Host "================================================================================="

}