Continuous account lockout error for a domain user in Windows server 2003 DC. Tried the account lockout and management tool and using the Lockoutstatus.exe I could get the details of client system name, reason ( Bad password) etc and verified the same by checking windows server security logs. The client OS is Windows 7 64bit and Alockout.dll is not compatible with Windows 7.
I tried the following steps.
- Cleared the credential manager.
- Unmapped the network drive.
- Verified that the user only login to domain from his PC ( Single session )
- I did a full antivirus scan and Windows malicious removal tool .
Installed all Windows updates.
I think some services may use his domain username for connecting to the network but I need to find out which service / program trying the wrong password. Is there any way I could get the logs for the same ( I also checked the Windows 7 security logs but no information about the bad password etc) Any help would be appreciated.