yes, I had a similar issue using 7.2.11. one of the AD users repeatedly had failed login attempts being logged once every minute or two. I thought someone had hacked his machine and was trying to get into the system. we looked at traffic between Ignition and the AD server and didnt see anything unusual. after about 12 hours it stopped on its own and I havent noticed it do it again.