Right-click. . The Account tab told him everything. A red X next to "Account is locked out" .

He drilled down: Domain > contoso.local > Managed Service Accounts > svc_backup_acc .

He started keeping a sticky note on his monitor: dsa.msc Bonus: Run as different user → runas /user:admin dsa.msc That night, Marcus saved three hours of troubleshooting not with a script or a complex tool, but with a four-letter command that put him exactly where he needed to be. Key takeaway from the story: The command dsa.msc launches Active Directory Users and Computers from the Run dialog, Command Prompt, or PowerShell. It's the fastest way to manage user accounts, groups, computers, and organizational units in an Active Directory domain.

He opened the dialog (Windows + R). His fingers hovered over the keyboard. He couldn't waste time clicking through menus. He needed the command.

He unlocked it, clicked OK , and within ten seconds, the file server began responding again.

He added her back, told her to log off and on again, and the ticket closed.

He knew the service account, svc_backup_acc , had been working fine for months. But after a rushed security patch earlier that day, something had broken. He needed to check if the account was locked, disabled, or had its permissions scrambled.

dsa.msc And pressed Enter.