I'm using ALTools to troubleshoot account lockouts, but when viewing the event viewer on the domain controller for some users the caller machine name is \\mydomain.com. Any idea where that is coming from? For one user it is happening every 4 minutes. She
uses a lot of different workstations and devices so it's difficult to isolate it to one, except I had her turn off the one she normally uses and the account still locked, so it's not that one.
↧