AD: Check if AD user account is locked

# taken from http://www.alexwinner.com/articles/powershell/111-lockoutaccountsad.html

function checkIfLocked($sAMAccountName){
    # sAMAccountName of the user
    # $sAMAccountName = "User-0"

    $ADS_UF_LOCKOUT = 16

    $Attribute = "msds-user-account-control-computed"

    $ADSearcher = New-Object System.DirectoryServices.DirectorySearcher
    $ADSearcher.PageSize = 1000
    $ADSearcher.Filter = "samaccountname=$sAMAccountName"
    $User = $ADSearcher.FindOne()

    # Use DirectoryEntry and RefreshCache method
    $MyUser = $User.GetDirectoryEntry()
    $MyUser.RefreshCache($Attribute)

    # Return the value of msds-user-account-control-computed
    $UserAccountFlag = $MyUser.Properties[$Attribute].Value

    if ( $UserAccountFlag -band $ADS_UF_LOCKOUT ) {
        Write-host "Account $sAMAccountName is locked"
    } else {
        Write-host "Account $sAMAccountName is NOT locked"
    }
}