For some reason, about every 5 minutes, I get a logon failure to my mail server as myself.  At first, I couldn't figure out why my account kept getting locked out so I turned on some auditing options.  I've got a whole security log of these failed attempts.  Actually, it's two attempts every 5 minutes.  Very obnoxious.

I'm trying to track down the source of the problem.  According to the documentation I have, they are logon type 7, which is an "Unlock" attempt, like from the console.  I don't think that's entirely accurate though because the server is behind me.  I think perhaps it might be from terminal services.  I'd like to disable that, but I currently don't have a monitor on that system.  We'll see what happens.