Domain Account Locking Out Randomly

Is his account being used on any of your SAM monitors or is it being used on orion report scheduler or unmanage utility or any other place ?

I will check out the SAM monitors.  Is there anyway to see which account the SAM Monitors/Components are using?

Since the Report Scheduler and Unmanage Utility are on our main NPM server and not the APE, I don't think that is what is causing the lockout.

Not really unless you go template by template.  However, you can check the Credentials Library in the SAM Settings as well as in the main Orion Settings to see if the account is listed there.

It is listed there.  What happens if I delete that account and there is a template that it is associated with it?

They'll stop being monitored and will effectively go into an unknown state. 

What you'd have to do to readily identify which applications are using that credential is run a couple of queries.  First you'd need to run:

Select * from Credential

to idenfity the ID of the credential in question. 

then you'd need to run the following in order to identify the applications where components are assigned those credentials.

Select APM_Application.Name from APM_Application

Join APM_Component on APM_Application.ID = APM_Component.ApplicationID

Join APM_ComponentSetting on APM_Component.ID = APM_ComponentSetting.ComponentID

Where APM_ComponentSetting.[Key] LIKE '%CredentialSetID'

AND APM_ComponentSetting.Value = #

Just replace # with the ID you found running the first query.

Got it!  Thanks mharvey!

Anytime.  Glad to help out.