As per Microsoft: "....In most account lockout scenarios, you should install ALockout.dll on client computers. Use the information that is stored in both the Netlogon log file and the Security event log to determine the computers from which the incorrect credentials are being sent that are locking out the user's account. When you install the ALockout.dll tool on the client computer that is sending the incorrect credentials, the tool logs the process that is sending the incorrect credentials...."
This software must be used as described... this is why I posted above: "....You might want to read this in detail..."
Different scenarios have different procedures.... Read it again..... carefully.... do not do anything until you fully understand the procedures and consequences.