Message : A user account was locked out. Subject: Security ID: S-1-5-18 Account Name: DC$ Account Domain: DOMAIN Logon ID: 0x3E7 Account That Was Locked Out: Security ID: S-1-5-21-xxxxxxxxxx Account Name: vstva Additional Information: Caller Computer Name: Domain Controller : DC.dc.bs.bnet When : 5.8.2021 9:17:45 TargetUserName : vstva Computer Lockout On : TargetSid : S-1-5-21-xxxxxxxxxxxx SubjectUserSid : S-1-5-18 SubjectUserName : DC$ SubjectDomainName : DOMAIN SubjectLogonId : 0x3e7 MessageSubject : A user account was locked out. Action : A user account was locked out. KeywordDisplayName : Audit Success Reported By : DOMAIN\DC$ Gathered From : DC Gathered LogName : Security Event ID : 4740 Version : 0 Qualifiers : Level : 0 Task : 13824 Opcode : 0 Keywords : -9214364837600034816 Record ID : 85115046 ProviderName : Microsoft-Windows-Security-Auditing ProviderId : 54849625-5478-4994-a5ba-3e3b0328c30d LogName : Security ProcessId : 636 ThreadId : 10628 MachineName : DC.dc.bs.bnet UserId : TimeCreated : 5.8.2021 9:17:45 ActivityId : RelatedActivityId : ContainerLog : Security MatchedQueryIds : {} Bookmark : System.Diagnostics.Eventing.Reader.EventBookmark LevelDisplayName : Information OpcodeDisplayName : Info TaskDisplayName : User Account Management KeywordsDisplayNames : {Audit Success} Properties : {System.Diagnostics.Eventing.Reader.EventProperty, System.Diagnostics.Eventing.Reader.EventProperty, System .Diagnostics.Eventing.Reader.EventProperty, System.Diagnostics.Eventing.Reader.EventProperty...}