Hi,
One Particular AD user account is getting locked out and we have checked security log found locked outevent ID 4740 for that user but Caller Computer Name is blank/empty.(below screenshot for your reference)
All domain controllers are running with 2012 r2.
Already tried with Microsoft ALtool.exe but unable to trace the machine which sending bad credential which causing account lockout.
caller computer name is blank only for one particular user account whereas other user which are getting locked out is coming with caller computer name.
Kindly let me how to trace the machine which causing this particular user account getting locked out.