Hi,
we are seeing one of our service account getting locked out for every fifteen minutes,
we have two domains(ex. A and B), the service account name(ex. A\XXX and B\XXX) is same in two domains and the passwords are different, In Domain A DClogs we can see that account 'A\XXXX' in B domain server is locked out.
we understand somebody used the domain A account in domain B
Can some help how do i find the process or job is causing to the account locked out in Domain B server
Thanks in Advance
This generally happens when a password is reset at the server and a client program runs its schedules with an old password , and hence locks it out. Logs will give you the IP of the client.