User lock outs - Audit failures on Secuirty log

[Tim Trotter1]

Hello,Several users at my job are getting locked out of their account due to too many login attempts even though they are claiming to have not attempted to log in for hours.The security log shows an 'audit failure' with the device listed as our domain controller. I've also gotten this with Kerberos listed as the device name. Does anyone know if a service can be causing this? Or should I be more concerned about a brute force attempt?Thank you

Continue reading...