What is the best way to monitor for a local windows user locked out with SAM?
https://thwack.solarwinds.com/t5/SAM-Discussions/Event-Log-Monitor-Issues-User-account-locked-out/m-p/369234