Resolve Intermittent AD Lockouts

Our Windows domain has started locking out a handful of users without warning. The accounts come from different security groups, but every one of them signs in from the same model of laptop and—intermittently throughout the workday—their credentials are rejected until an administrator resets the lockout counter. Because the issue is sporadic I have not been able to isolate whether it is Kerberos ticket-related, a cached credential problem on the devices, or something deeper in Active Directory itself. Here’s what I need from you: • Pinpoint the root cause by reviewing Event Viewer logs, AD replication status, group policies and any authentication traces you feel are relevant (LockoutStatus, Netlogon logs, etc.). • Implement and verify a permanent fix so that these machines no longer trigger lockouts during normal use. • Document the steps taken—registry edits, GPO changes, service restarts, or scripting solutions—so I can reproduce them later or roll back if required. • Acceptance will be a clean run of at least two business days with no unexpected lockouts for the affected users, confirmed in the security logs. You will receive temporary VPN access to the domain controllers and an affected test laptop once we agree on timing. If you have tackled similar device-specific lockouts before, especially those tied to cached credentials or faulty NIC drivers, that experience will be invaluable. I’m ready to begin as soon as you are.

Project ID: 40257641