We have a Windows 2012 R2 AD network. For reasons unknown, some Windows logon accounts are randomly locking out. We can unlock them but they immediately relock. The individuals are not trying to login, they don't have accounts on phones, etc. The lockout is not appearing in the Security event log. We did notice that there are many Windows Filtering Platform blocked a packet (5152) events. We are not sure if this is related to the issue.
The lockout problem started on Friday last week. Thanks for any help!
