We are seeing more frequently people getting locked out of their accounts and not being able to log in even after waiting.
Account lockout is 5 tries, wait 5 minutes, can log in again.
For some users even this does not work, I have to unlock the account on a domain controller, and sometimes even this does not work and I must reset the password.
Why does this happen?? How do I fix or prevent this??
Only thing I learned of so far is to lower the replication time from 180 minutes to 60 minutes in AD Sites and Services (IP Inter-Site Transport).
Thank you, Tom