<div>
If you have an Exchange Server you may have a user with a device constantly checking email with an incorrect username or password. Or, there could be a device on the network (i.e., a copier) using LDAP authentication to copy to file or email with an incorrect password.
</div>


If you have an Exchange Server you may have a user with a device constantly checking email with an incorrect username or password. Or, there could be a device on the network (i.e., a copier) using LDAP authentication to copy to file or email with an incorrect password.

<div>
Or it could be the iTunes password or any proxy credentials error ?
</div>


Or it could be the iTunes password or any proxy credentials error ?

<div>
Turned out to be an IP phone, however we were never able to get the source by using the logs.
</div>


Turned out to be an IP phone, however we were never able to get the source by using the logs.

<div>
<div class="content wysiwyg-content">
I had this question after viewing <a href="https://www.experts-exchange.com/questions/27560839/Active-Directory-User-Id-frequently-locked-out.html" rel="ugc">Active Directory User Id frequently locked out</a>.<br />
<br />
4776,AUDIT FAILURE,Microsoft-Windows-<wbr />Security-A<wbr />uditing,Mo<wbr />n Jul 18 09:14:30 2016,No User,The computer attempted to validate the credentials for an account. &nbsp; &nbsp;Authentication Package: MICROSOFT_AUTHENTICATION_P<wbr />ACKAGE_V1_<wbr />0 &nbsp;Logon Account: xxx &nbsp;Source Workstation: &nbsp; Error Code: 0xc000006a
</div>
</div>


I had this question after viewing Active Directory User Id frequently locked out (https://www.experts-exchange.com/questions/27560839/Active-Directory-User-Id-frequently-locked-out.html).

4776,AUDIT FAILURE,Microsoft-Windows-Security-Auditing,Mon Jul 18 09:14:30 2016,No User,The computer attempted to validate the credentials for an account.    Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0  Logon Account: xxx  Source Workstation:   Error Code: 0xc000006a

Frequent AD account lockouts Event 4226.  Source Workstation is blank.

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.