Active Directory account lockouts happen when too many failed login attempts trigger security limits. Configure the Account Lockout Audit Policy in Active Directory.