It's possible you'll find the event in your domain controller.  I would export your logs and look for your account domainservice account.

If it's in there, it should indicate which computer or server is locking it out (source workstation name).  If you don't have the proper logging enabled, I would enable: security Audit logging on all domain controllers(s).  I believe there are also free tools available that will show your accounts and give you more information on where they were locked out from and when.

There use to be a free tool that I would download as an admin that would give me just enough info: LockoutStatus.exe.

Hi DimpyGupta,

You can also try and look in “Event Viewer”, As an error event will be logged as soon as the Authentication fails for a logon, The error logged should also give you a short description what was trying to authenticate to your k2 service account.

You can also try looking in workspace on one of the process instances for any errors and see what the errors is and on what activity it is occurring.

You can also go to “process overview” select the process/activity and locate the “view flow” icon.

 This will show the workflow in its running state and will show at what activity the error appears if any error appears.

Please sent me the screen shots of errors in event viewer and in workspace if possible.

Regards

Quintin