| Platform SDK: Active Directory, ADSI, and Directory Services |
Unlike the WinNT provider, LDAP can neither read nor set the IsAccountLocked property, because the lockout flag is not stored in the Active Directory. The WinNT provider creates this value on the fly, but the LDAP provider does not have this ability. To read or set account lockout values, you must use the WinNT provider.