Thanks Brad, but again they are using the WinNT provider. I was able to get the needed info with that. I was looking into using LDAP as the provider and instead of getting the "text value" I expected, I am getting an object back, and since I do not know what the members of that object are I am unable to read any of them.

What I ended up with was something like this

 Code:
$usr = GetObject(WinNT://@domain/$user)
$lock = usr.IsAccountLocked
Select
  Case $lock = 0
    $Lbl_Locked.text = "Account is NOT locked"
  Case $lock = -1
    $lbl_Locked.text = "Account is locked"
  Case 1
    $lbl_Locked.text = "Error reading account lockout"
EndSelect


To "unlock" the account I have this code

 Code:
$usr.IsAccountLocked = "FALSE"
$usr.setinfor
If @error = 0
  $lbl_Locked.text = "Account has been unlocked"
Else
  $lbl_Locked.text = "Error unlocking the account"
EndIf



What I found interesting is that everything that I have read so far says that this should be a "single value" in LDAP, when KiX reads the value it returns a Vartype of 9 (object). Hence why I have had so many problems. Like I stated it was easy enough to fix by changing the provider.
_________________________
Today is the tomorrow you worried about yesterday.