The user BWREMOTE keeps getting locked in SID since the copy back.
After the copy back the password wasnu2019t known so it was reset and all the RFCs updated. However we assume there is something else out there which is still using the old / wrong password which is locking it.
Below is a system log entry but it doesnu2019t identify the source server ip or name. Suspect you might have to enable audit logging, at least for failed logins to get to the bottom of this.
At the moment we are unlocking he user when it is causing a problem.
Thanks for you help, i have founded the solution , actually there is RFC connection running with BWREMOTE user , when we unlock the user we were not changing the RFC password, Now we reset the password for BWREMOTE and change the password for RFC.
Now The issue has been resolved.