Hi, I am using Exchange 2003 on Windows 2003 server. One of my user AD account got locked out and IT guys checked on DC and told the source for this was OWA. This user is using three devices to access emails Laptop, IPhone and Tablet PC. Now they want me to find which device and IP did this. Is there any way to check all that information? I have checked the Security events but did not found any error. Also let me know if any debuggeing needs to be ON to check it in future and how to do it?