I am facing a problem, every day around 17:00 4-5 domain user accounts get locked out. I think that the problem is from a script that is running ... somewhere... the problem is that I cannot pinpoint which computer/server tries to log in with incorrect credentials. Is there a way to find the computer name/IP of this machine?
I usually have luck doing it this way:
If it happens at the same time daily I'd say its almost certainly a scheduled task.
|show 1 more comment|
This was answered a while ago - My useraccount gets permanently locked by someone