Resolving persistent Active Directory account lockouts
Investigation
Traced repeated lockouts on a high-priority account using AD Event ID 4740, source IP identification and Credential Manager analysis.
Root cause
Outdated credentials stored in an old mobile mail profile, combined with cached background services.