# taken from http://www.alexwinner.com/articles/powershell/111-lockoutaccountsad.html

function checkIfLocked($sAMAccountName){
	# sAMAccountName of the user
	# $sAMAccountName = "User-0"
	 
	$ADS_UF_LOCKOUT = 16
	 
	$Attribute = "msds-user-account-control-computed"
	 
	$ADSearcher = New-Object System.DirectoryServices.DirectorySearcher
	$ADSearcher.PageSize = 1000
	$ADSearcher.Filter = "samaccountname=$sAMAccountName"
	$User = $ADSearcher.FindOne()
	 
	# Use DirectoryEntry and RefreshCache method
	$MyUser = $User.GetDirectoryEntry()
	$MyUser.RefreshCache($Attribute)
	 
	# Return the value of msds-user-account-control-computed
	$UserAccountFlag = $MyUser.Properties[$Attribute].Value
	 
	if ( $UserAccountFlag -band $ADS_UF_LOCKOUT ) {
		Write-host "Account $sAMAccountName is locked"
	} else {
		Write-host "Account $sAMAccountName is NOT locked"
	}
}