I work with desktop support for a rather large organization. I repeatedly have users experiencing account lockouts. We have turned off all smart devices so that the customer is only using his company issued laptop. I've cleared all browser cache and cleared windows vault credential manager. Lockouts continue to occur.
I've been working with our server team on the issue. All that they seem to be able to tell me is that the device is coming from the external portal. From what i'm told this means its not happening while he is connected to our internal network, thus it could be a smart device or his laptop while remote. Because it is from an external portal they have been unable to provide MAC address or device name that is causing the lockouts.
I'm looking for some advise or perhaps a tool or utility I can use from the client side to try and determine what is causing the lockouts. Any advice or suggestions would be greatly appreciated.
- Customers laptop has been replaced
- Server team can only tell me when they see bad password attempts against the external portal