Question : Domain user account continuously getting locked out.

I have a domain users account that is continuously being disabled. Event logs on the server show multiple failed login attempts from his machine, that are obviously not human attempts at logon due to the frequency and speed, before the account is disabled.

I downloaded Account Lockout Tools (http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en) and enabled netlogging on the DC. I've tried examining the logs but can't pinpoint what the offending service is.

Can I get some guidance please?

Answer : Domain user account continuously getting locked out.

Check for services running under that user, scheduled tasks running under that user, mapped drives running under that user.  Also stored user names and passwords in the control panel, they may have an old password stored.  I've even seen issues where laptops with older wireless drivers would cause user lockouts.