Active Directory account lockouts happen when too many failed login attempts trigger security limits. Common causes include outdated cached credentials, expired service account passwords, mobile ...
Resetting a password doesn't always remove attackers from Active Directory. Specops Software explains how cached credentials and Kerberos tickets can keep attackers authenticated after a reset.