Your comments

I took DonMega IceCube's batch script above and wrote a PowerShell script that accepts a username or email address and resets only that user account and only if it's actually locked out, by editing the XML intelligently, and only restarts services if a reset is completed. We deploy this through an RMM tool on our ScreenConnect server, but it could be run locally as well. If there's an interest in the script I can find a place to post it and provide a link.