Hi,
we are seeing one of our service account getting locked out for every fifteen minutes,
we have two domains(ex. A and B), the service account name(ex. A\XXX and B\XXX) is same in two domains and the passwords are different, In Domain A DClogs we can see that account 'A\XXXX' in B domain server is locked out.
we understand somebody used the domain A account in domain B
Can some help how do i find the process or job is causing to the account locked out in Domain B server
Thanks in Advance
Have you checked the SQL Server Logs to see if you can get a clue or two on who or what is causing the failed logins?
Once you check the logs you should find an ip address, you could then try an rdp connection to that box; I experienced this with a login for a remote server service, using the SQL account, that had long been forgotten and was undocumented.