Hi!
An AD-Account keeps getting locked out due to an unknown mobile-device providing invalid logon-credentials (probably an orphaned device beeing used before).
I removed all old devices Active-Sync partnerships via EMC, but the problem remains.
At the moment I don't have any other ideas than changing the accounts logon-name. As this would lead to several subsequent changes (regarding other enterprise-applications) and hence is considered as absolutely last option - are there any other options?
I thought about limiting the accounts Active-Sync devices to 1, but I don't think that will prevent the unknown device to try syncing at least.
Regards,
Stefan