I work with multiple clients and recently I've been flooded with tickets about users' Active Directory accounts getting locked out. Has anyone else noticed this trend? What could be causing it?
2 Answers
We faced a similar issue and used the Netwrix Account Lockout Examiner to track down the cause. Turns out, a scheduled task run by a developer was using an outdated password after a change. Plus, another lockout was caused by a OneDrive scheduled task that hadn't been updated either. Definitely recommend that tool!
It's a good idea to check the Domain Controller logs to see where the lockouts are originating. I had a laptop that would constantly lock me out because the keyboard was so flaky, I'd mis-type my password a lot. It could also point to someone trying to attack the account.
Will bookmark this, thanks!