Strange 2008 R2 AD login lockouts!

[DTGMI]

We are experiencing some very strange issues with a few AD users on our 2008 R2 server.

Only have (12) or so users and a few months ago one of them started finding his login locked out when he first tried to login in the morning. I think it might have been after an overnight forced WIN 10 update and his WS-1 rebooted over night. We would unlock it in AD and the first few times it was fine - happened 2-3 times in Nov & Dec. Then we couldn't unlock it - but a password reset seemed to get it unlocked. Then it was fine all of Jan. Then another WS-2 had a few random lockouts - in Jan - but those were unlocked without issue. Last week our shipping WS-3 got locked out ... we were able to unlock it, but this week - both the WS-2 and WS-3 got locked out and we can't get them unlocked???

We have talked to some of our MS tech friends but no one has a clear solution.

I am confident one of the wise MS techs on this site has the solution ...

Thanks!

 

[DrB0b]

Are you using Folder Redirection or Roaming profiles? Do users log into more than one PC or are they stuck to their designated machines? If they are on one machine, if you try to log them into another PC, will their credentials work? If, when an account is locked, can you log into that same PC with domain admin creds? If not, can you log in with local admin creds and make sure your ipconfig /all is displaying correctly?

Learning - A never ending quest for knowledge usually attained by being thrown in a situation and told to fix it NOW.