Active Directory Account Lockout Troubleshooting Expert Needed

Active Directory Account Lockout Troubleshooting – Windows Server / Azure AD

Job Description:

ABC Company is experiencing recurring domain admin account lockouts within our Active Directory environment. The affected domain controller (DC01) is hosted in Azure and runs Microsoft Windows Server 2016.

Initial checks suggest that Scheduled Tasks and possibly Windows Services are still using outdated admin credentials, which may be causing repeated lockouts.

We are seeking an experienced Windows System Engineer / AD Specialist to:

Investigate account lockout events and confirm the exact root cause.

Review DC security logs (Event ID 4740) to identify which machine(s) are triggering the lockouts.

On the identified machine(s), check:

Scheduled Tasks

Windows Services

Credential Manager entries

Applications (IIS, SQL jobs, third-party apps)

Update or remediate any entries still using old credentials.

Verify resolution by confirming no further lockouts occur.

Provide a short technical report with recommendations to prevent future lockouts (e.g., use of gMSA or service-specific accounts).

Required Skills:

Active Directory & Domain Controller administration

Windows Server (2016/2019/2022)

Task Scheduler & Windows Services management

Account lockout troubleshooting (Event ID 4740 analysis)

PowerShell scripting (nice to have)