You need to track down what is locking out the service account. From the domain controllers you should be able to identify the IP. In the interim I would configure your service account to disable it from being locked out.