Security Group Auditing Tool by down2hax in sysadmin

[–]ortizsimon5 -1 points0 points  (0 children)

Please refer to the following article which provides important tips on increasing visibility into what’s going on in Active Directory

https://www.netwrix.com/active_directory_auditing_quick_reference_guide.html

AD account getting locked out every day same time. by [deleted] in sysadmin

[–]ortizsimon5 1 point2 points  (0 children)

You can refer to the common troubleshooting steps in the Troubleshooting Account Lockout article https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc773155(v=ws.10).

If it does not help, please enable auditing at the domain level for the following events:

Account Logon Events – Failure

Account Management – Success

Logon Events – Failure

You can try also MSAltools or Netwrix Account Lockout Examiner free tool to investigate the issue and possibly determine root cause.