We have a problem that I simply don't understand. I have IIS 6 and there is one application pool on this server. One of my users (who has never logged into this server) has his account locked out several times a day. We tracked the lockout to the IIS server's IP and discovered, that if we stop the application pool, his account doesn't get locked.
The account doesn't have rights on the box (which is why he hasn't logged into it) so I can't see how this would happen. The user does have a second account that has rights on the box.
Any thoughts on how to prevent IIS from locking my user's account? Thanks.