Use Get-ADUser to get locked status and if locke give a choice to unlock it.

Question

Hi guys and girls,
Im startling to learn powershell scripting and have made my first tool/Script.
Below script is the one i use, however i do have an problem i would like some help with.
I use the script to display some basic info and also to show if the user is lockedout or not.
However i do would like to have the choice to unlock the user in the script as well, therefore im using the if statement.
But dont get it to return the value i want. What i want it to do is to check if the account is locked if so ask if it should unlock it. Any help or input is appreciated.
/Json
$userinput = Read-Host "Enter Username Here"
Get-ADUser -Identity $userinput -Properties * | Select-Object DisplayName, city, department, EmailAddress, HomeDirectory, MobilePhone, OfficePhone, Manager, PasswordExpired, PasswordLastSet, LockedOut
  If(((Get-ADUser -Identity $userinput -Properties lockedout).lockedout = $true))

Answer 1

Hi there, I've not tested this properly but it should do the trick.
add-type -AssemblyName System.DirectoryServices.AccountManagement
$userinput = Read-Host "Enter Username Here"
$res = Get-ADUser -Identity $userinput -Properties DisplayName, city, department, EmailAddress, HomeDirectory, MobilePhone, OfficePhone, Manager, PasswordExpired, PasswordLastSet, LockedOut | Select-Object DisplayName, city, department, EmailAddress, HomeDirectory,
MobilePhone, OfficePhone, Manager, PasswordExpired, PasswordLastSet, LockedOut
if ($res.lockedout -eq $true){
$unlock = Read-host "Unlock? Y/N"
if ($unlock -eq "Y")
$context = [System.DirectoryServices.AccountManagement.ContextType]::Domain
[System.DirectoryServices.AccountManagement.UserPrincipal]::FindByIdentity($context,$userinput).UnlockAccount()