I have a domain, and a child domain. The child domains domain controller is a Global Catalog server. I know i can use queries to access the partial attribute set inside the global catalog server, and the attributes like bad password count on the PDC using powershell. Is it possible that i can access the attributes of global catalog server and primary domain controller using the GUI of Active directory? If yes, how? If not, what is the reason?
Active Directory is a multi-master database. As a general rule they will all have the same information. Some attributes are special and not replicated or replicated at very long intervals; badpwdcount is one of those special attributes and you're right to check the PDC.
Open Active Directory User and Computers, right-click the domain and open Operations Masters and go to the PDC tab for the server name. Connect directly to that server then enable Advanced Features from the View menu. After that, you need to find the object in the hierarchy, the Attribute Editor tab will not show if you open the account from the search box. Once you find the object in the hierarchy, go to the Attribute Editor tab and you'll see the badpwdcount attribute.