I have a issue where a user account is getting locked every 30 secs. Now if I read from Lockout Status Tool it gives me the Original DC. And when i go to the DC I get the log below:
--------------------------Event Log from DC----------------------------------------
A user account was locked out.
Subject:
Security ID:
SYSTEM Account Name:DC01$
Account Domain:mydomain
Logon ID:0x3e7
Account That Was Locked Out:
Security ID:MJN\abc
Account Name:abc
Additional Information:
Caller Computer Name:Exch2 (Hub Cas Server)
--------------------------Event log from Exchange Server----------------------------------------
Further If I read the log from the hub cas server i get the below entry
An account failed to log on.
Subject:
Security ID:
NETWORK SERVICE
Account Name:SBYPRDHCX2$
Account Domain:abc
Logon ID:0x3e4
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name:abc
Account Domain:
Failure Information:
Failure Reason:Account locked out.
Status: 0xc0000234
Sub Status:0x0
Process Information:
Caller Process ID:0x1674
Caller Process Name:D:\E2k7\Bin\EdgeTransport.exe
Network Information:
Workstation Name:Exch2 (Hub Cas Server)
Source Network Address:-
Source Port:-
Detailed Authentication Information:
Logon Process:Advapi
Authentication Package:MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Transited Services:-
Package Name (NTLM only):-
Key Length:0
-----------------------------------------------------------------------------------------------
Unable to determine what is the possible cause which is calling the EdgeTransport.exe. Have any one come across this scenario.
Sujit
