Hello,
we are facing an issue where the domain admin accounts are becoming locked randomly.
We have filtered out the event 4740 in the windows security log and we can see the PCs triggering this lockdown.
-------------------------------------
A user account was locked out.
Subject:
Security ID...
account lockout
antivirus
contoso
domain admin
domain issues
event 4740
kerberos
malware
network analysis
network security
rdp sessions
security id
smb protocol
system admin
system format
troubleshooting
user account
user management
windows logs
windows security
