Banks, credit unions, insurance companies,
Account lockouts are displayed with delay
|Symptoms||It takes a long time for account lockouts to be reflected in NetWrix Account Lockout Examiner.|
|Cause||This can happen if the product is set to monitor the Primary Domain Controller (PDC) only. If an account gets locked on a different domain controller, it takes time for the lockout event to replicate to the PDC, and this causes the delay.
Another possible reason is very high activity in your domain that generates more events per second than the product can handle. As a result an event queue and a delay occurs .
To fix the issue, set the product to monitor all DCs in the monitored domain and change event processing method.
To change to All DCs mode this, perform the following steps: