Anything in the event logs to advise why the account is getting locked out?
Just a lot of Event 675...in the security logs on DCs.. I commented out some lines for privacy
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 675
Time: 10:05:06 PM
User: NT AUTHORITY\SYSTEM
User Name: User_Name_Here
User ID: Domain\User_Name_Here
Service Name: krbtgt/domain_name_here
Pre-Authentication Type: 0x0
Failure Code: 0x19
Client Address: IP_ADDRESS_HERE
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Running into same issue. Anyone have any ideas as to why this continues during the AD sync? Would love to not have to unlock the account every Monday morning.