The service account for ADAudit plus has been locking out at 1am on one or more of my monitored domains regularly.  It is a dedicated service account, 1 per domain, that is only used by ADAudit and the lockouts are coming from the ADAudit server.

Any advice on how to troubleshoot how this is happening?  Simply unlocking the account allows audit data to be collected, until the next 1am incident.

Thanks,
Pete