AD Account got locking out frequently

[kingkong1977]

Hi,
User AD account getting frequently. We run a report on domain control log using eventcombo.exe bad request is coming from his work station. we checked mapped network drives other services, we are unable to find what causing account lock out. There is any way we can find what services is trying to login and failing in system.

Our environment AD-2003, bad request coming from Win xpsp2.

Thank you,
Venkat..

[GeforceUser]

This can be caused by the combination of assets, "the account lockout policy" set through Group Policy and Win32/Conficker-Worm computer associated to the network installed. The worm endeavor to log on to network shares through a combination of bad user name and password, which tresses the user accounts. This is simulated to additional domain controllers, and if the contaminated computer is still active 1083 and 1955 the event is recorded.