We are running in a Windows 2008 / Windows 7 environment.
One on my users is being locked out of his Active Directory account on a daily basis. This occurs between 10 and 18 hours after each reset.
This just started last week.
I can see that the reason for the lockout is a failed number of password attempts. However, the user is not failing any attempts when he unlocks his system.
Therefore I am thinking that there must be a service, or some application, that has held on to his credentials (possible old?) and is trying to access the network in someway thus triggering the lockout event.
Are there any tools that I can use to tell me what computer these failed logins are coming from? Is there anything you can recommend to further troubleshoot this issue? It has become very frustrating.