The "Locked out reason" shows audited events from DCs that are collected by Active Administrator agents.
The locked out accounts are pulled live, and then correlated to the collected events.
If there is nothing, the likely culprit is that the DC in which the lockout occurred does not have an agent installed, or it is malfunctioning.
Another reason could be that the DC is not auditing these events, but that is much less likely.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center