Originally Posted By: Joe V
How would you even begin to track something like that down ?


Typically that would be hardware based, so you remove hardware one piece at a time, reboot, test again. If it isn't hardware, then you look at some TSR (terminate and stay resident) piece of software that makes a call at a regular interval.

Great example. Had a user who was having her password locked out every 15 minutes. Nobody could figure out why. Until I looked. Adobe Acrobat was set to look for updates every 15 minutes. I went into prefs and turned off automatic updates and that solved it. It was sending an Adobe supplied default password to the company proxy server and locking her out.

Sometimes it is things you never think to look for.