We've got a domain service account that is repeatedly getting locked out, but I'm not getting any 644 or 529 events in the DC security logs for that account. I've also run the built in Account Lockouts search in EventCombNT and come up empty. I'm pretty sure it is some kind of a scheduled job that is doing it, but finding it is proving challenging. If it helps any, it's a SQL Server service account and it runs many SQL queries.
Any ideas how I can find what is locking out this account? Tim Evans Associate, IT Manager S P A R L I N G 206/667-0509-Direct www.sparling.com <http://www.sparling.com> ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
