alarm of locked account event

alarm of locked account event

Hi, I encountered a probelm after I update ServiceDesk plus to the lastest version. I have set up a passive monitor for locked account event, when I scan software on a domain computer, the action will be successful, but I will get a alram of locked account event immediately, then I checked security event on domain controller, there is a failure adult shows domain administrator's passowrd located username field, can someone help me to figure it out? sorry for my bad english.

                    New to ADSelfService Plus?