DevAdmin account locked out frequently

Sree 1,966 Reputation points
2021-11-18T03:17:40.21+00:00

Account is getting locked out frequently. We are having an frequent account locked out issue with DevAdmin account. We tried to identify 4740 event ID for caller computer name please find the attachment for the ref.

this is service account. mailbox is hosted in on-premises.

150379-snap2.png

attaching the PS transcript
[150461-11.txt][2] [2]: /api/attachments/150461-11.txt?platform=QnA

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
2,881 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
6,083 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
1,233 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michel de Rooij 1,516 Reputation points Microsoft MVP
    2022-03-07T22:51:16.787+00:00

    That lockout event is caused by SYSTEM; are the no prior 4740 events not caused by SYSTEM?
    Also, has SDCADCPRD01 the PDC role or not? If not, look for 4740 on the PDC.
    Alternatively, you can use a tool such as ALTools to perform the digging for you - see https://www.microsoft.com/en-us/download/details.aspx?id=18465