We have an issue this morning. Number of users AD accounts were locked out. I have checked the security log in event viewer and those failure audit is generated by a client machine. The machine keep guessing user’s account password and made those account locked out. To solve it, we disconnect that client pc from network and did a virus scan.
Can anyone suggest an IPS Software which can prevent this issue? let say, it will automatically disable the computer account when it keep generate lots of failure audit….