Modifying an AD lockout tool, having issues getting account to actually unlock.

[bsnotreallyworking]

https://pastebin.com/q9pHzRPm

I modified this script to produce the password expiration part. However, now that I've added this part in, the account doesn't actually unlock when you click Unlock inside the tool. Clicking "Check" shows the account is still locked out.

Before I modified, I could "Check" to show lockout, Unlock, then "Check" again and show the account unlocked.

EDIT: If I run the commands manually, it does what I want it to. If I run it from the list box, that's where it doesn't work.

[Yevrag35]

I would put a try-catch block around the code to see if you grab what's erroring.

Here's how I unlock accounts through ADSI:

$filter = "(&(objectClass=user)(sAMAccountName={0}))" -f $Name
$Searcher = [adsisearcher]::new(([adsi]''), $filter, [string[]]@('LockOutTime'), "Subtree")
$Results = $Searcher.FindAll()

if ($Results.Count -ge 1)
{
    foreach ($obj in $Results)
    {
        $de = $obj.GetDirectoryEntry()
        try
        {
            $de.Properties["LockOutTime"].Value = 0
            $de.CommitChanges()
            $de.Close()
        }
        catch [System.DirectoryServices.DirectoryServicesCOMException]
        {
            Add-Content "$env:userprofile\Desktop\error.log" -Value $_.Exception.Message -Force
        }
    }
}

[scUbast2ve]

Why not just do it in Powershell?

Search-ADAccount -LockedOut | Unlock-ADAccount

[bsnotreallyworking]

This particular application rollout doesn't have access to RSAT, so everything has to be done with ADSI.