Forum Discussion
Account lockouts
Has anyone else noticed account lockouts propagating for not apparent reason on AD for server 2016 We now have multiple clients experiencing the issue, with little to go on in terms of logging.
- Review Event Viewer logs for Event ID 4740 and check the source of the failed login attempts (IP address, machine, etc.).
- Audit client machine configurations and ensure that no credentials are cached or stored incorrectly.
- Update the Account Lockout Policy to balance security and usability.
- Use LockoutStatus or other tools to trace back the source of the lockouts more efficiently.