But there are also other reasons why accounts might get locked out. But account lockout often happens accidently or because of malicious behaviour, so IT helpdesk staff are regularly tasked with unlocking user accounts. To prevent brute-force login attempts, Active Directory (AD) account lockout policy determines the number of incorrect logins before accounts get locked.