DevAdmin account locked out frequently

Sree 1,971 Reputation points
2021-11-18T03:17:40.21+00:00

Account is getting locked out frequently. We are having an frequent account locked out issue with DevAdmin account. We tried to identify 4740 event ID for caller computer name please find the attachment for the ref.

this is service account. mailbox is hosted in on-premises.

150379-snap2.png

attaching the PS transcript
[150461-11.txt][2] [2]: /api/attachments/150461-11.txt?platform=QnA

Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,536 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,636 questions
Microsoft Exchange Hybrid Management
Microsoft Exchange Hybrid Management
Microsoft Exchange: Microsoft messaging and collaboration software.Hybrid Management: Organizing, handling, directing or controlling hybrid deployments.
2,106 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Michel de Rooij 1,536 Reputation points MVP
    2022-03-07T22:51:16.787+00:00

    That lockout event is caused by SYSTEM; are the no prior 4740 events not caused by SYSTEM?
    Also, has SDCADCPRD01 the PDC role or not? If not, look for 4740 on the PDC.
    Alternatively, you can use a tool such as ALTools to perform the digging for you - see https://www.microsoft.com/en-us/download/details.aspx?id=18465

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.