I just had a post over an odd issue with a user of mine and now I'm having one of my own. On Friday I noticed my AD account kept getting locked out. I unlocked it and figured it was my iPad or iPhone causing the issue. After about 20 locks I used the lockout status tool from Microsoft and I think I have the culprit narrowed down to one of my servers (actually my Spiceworks machine). What I can't determine is what is prompting the lockout. I have no services using my credentials, I use alternate credentials for servers anyways since my own account is not set as a domain admin, and I can't find any programs that are using my creds. Using the NetWrix Account Lockout Examiner shows this server providing bad credentials on a regular basis, but I'm stumped. Anyone have any ideas? ALockout.dll from Microsoft's Account Lockout Tools seemed promising, but it doesn't work on a 2008 R2 server. I haven't found an equivalent.
I have just unlocked my account and am shutting this server down for the night to see if the issue goes away while the server is off.
FYI, here is a screenshot of my NetWrix output.