Is there a way for Orion to monitor and alert when a user account is locked in our Active Directory?
This should be a default Alert, but i do not see it...
There is a thread with a similar scenario:
Alert on Active Directory account lockout
Using the Windows Server 2008-2012 Domain Controller Security template, you could configure an alert to notify you when this component goes down (indicates a match has been found) and use the ${WindowsEventMessages} macro in the email message body, which will include the full details of the Windows Event Log in the email alert notification.