I'm dealing with several accounts that keep getting locked out, and I can't figure out what's causing it. When I look at the logs, it shows that there are attempted logins from non-existing machines. Has anyone here experienced this or knows how to find the source of these issues?
2 Answers
There's a free tool from Netrix that can help you track down the source of these account lockouts. One common cause is a service running under the user account but using an outdated password. Another possibility could be a scheduled task that's set up with old credentials.
How many times are the accounts locking out? If it's not reaching 10, and you have cloud apps like M365 involved, increasing the limit from the old standard of 5 to 10 could resolve the problem. It's often a simple fix if that's the case.
Right now it's set at 5. Why is that a concern? We have about 100 users, but this issue is only affecting 6 accounts.