I'm having trobule at work with an AD account (let's call it USER A) that keeps locking out all the time. Using ALTools I figured it out the computer where the lockout is coming from, it's a 2008 R2 Server which hosts an application citrix like, so users remotely login to the app using terminal services.
The thing is I can't know where the lockout is coming from (process, application, service, user account, etc), because the user in question has no login attempts on the server, neither has a user profile on it, so my guess is that another user is using User A credentials from inside his session.
Can anybody help me finding the origin of the lockout?
Thank you!