Dear Experts,
your assistant is solving the below issue is highly appreciated...
EventID: 0x00001284 (4740) - A user account was locked out.
Subject:
Security ID:
S-1-5-18
Account Name:
xxxx$
Account Domain:NNN
Logon ID:
0x3E7
Account That Was Locked Out:
Security ID:
S-1-5-21-1699241594-4287572650-2767143919-3647
Account Name:
xyz
Additional Information:
Caller Computer Name:Apples-MacBook-Pro.local
As per the above log, account xyz keep getting locked from ""Apple-MacBook-Pro.local". user claimed that he don't owned the machine anymore & we need to blocked this machine. noting that is machine is trying to access from external & not joined to domain.
kindly suggest solution as we are getting daily 20 - 25 account locked out notification.