One user id is getting locked every day at same time automatically with wrong password .
When we check SUIM for change documents we see that value for the lock as 128 ( incorrect password)
and the tcode for the lock is KRNL. and we dont have any other information regarding this.
we have cheked table USR02 as well but did not find any more information
We are manually unlocking everyday as of now but don know the exact reason why is it being locked.
We also checked for any jobs running on the same user id and also any RFC connetions using this user id but did not find any in RFSDES.
The user id is getting locked at alomost same time every day so We dont believe its a manual attempt.
Please check the same and let us know if there is any other way to find out REASONS why the user id is being locked and please also let us know if there are any logs to find the same.